Login Request a demo
Unscored severity · published Nov 17, 2006
CVE-2006-5968
MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows…
–
CVSS
0.4%
EPSS
No
On KEV
Description
MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MD
Mdaemon · Alt-n
9.0.5; 9.0.6; 9.51; 9.53 · source: NVD
Affected product
MD
Mdaemon
Alt-n
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5968
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5968
secunia.com
http://secunia.com/advisories/21554
Vendor Advisory
http://secunia.com/secunia_research/2006-67/advisory/
securityreason.com
http://securityreason.com/securityalert/1890
securitytracker.com
http://securitytracker.com/id?1017238
www.securityfocus.com
http://www.securityfocus.com/archive/1/451821/100/100/threaded
www.vupen.com
http://www.vupen.com/english/advisories/2006/4538
More from Mdaemon
7.5
CVE-2006-5708
Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via…
–
CVE-2008-6967
Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and…
–
CVE-2007-3622
Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a denial of service (crash) via malformed messages
–
CVE-2006-5709
Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."
–
CVE-2006-4364
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly…