MD
Product
Mdaemon
28
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Mdaemon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-5708 | 7.5 | Nov 4 | Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via… Affected: through 9.50; 2.8; 2.8.5.0; 2.71_sp1; 3.0.3; 3.0.4; +34 more |
| CVE-2008-6967 | – | Aug 13 | Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and… Affected: through 10.0.1; 2.8; 2.8.5.0; 2.71_sp1; 3.0.3; 3.0.4; +34 more |
| CVE-2007-3622 | – | Jul 9 | Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a denial of service (crash) via malformed messages Affected: through 9.60 |
| CVE-2006-5968 | – | Nov 17 | MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows… Affected: 9.0.5; 9.0.6; 9.51; 9.53 |
| CVE-2006-5709 | – | Nov 4 | Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit." Affected: All versions, or not specified |
| CVE-2006-4364 | – | Aug 27 | Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly… Affected: 2.8; 2.8.5.0; 2.71_sp1; 3.0.3; 3.0.4; 3.1.1; +34 more |
| CVE-2006-2646 | – | May 30 | Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a long A0001 argument that begins with a '"' (double quote) Affected: 2.8; 2.8.5.0; 3.0.3; 3.0.4; 3.1.1; 3.1.2; +34 more |
| CVE-2006-0925 | – | Feb 28 | Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service (CPU consumption) by creating… Affected: 8.1.1; 8.1.4 |
| CVE-2005-4266 | – | Dec 15 | WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows… Affected: 8.1.3 |
| CVE-2005-4209 | – | Dec 13 | WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail… Affected: 8.1.3 |
| CVE-2004-1546 | – | Dec 31 | Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOML, SEND, or MAIL command to the SMTP… Affected: 6.5.1 |
| CVE-2004-2504 | – | Dec 31 | The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows… Affected: 6.8.0; 6.8.1; 6.8.2; 6.8.3; 6.8.4; 6.8.5; +1 more |
| CVE-2004-2292 | – | Dec 31 | Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to the IMAP server Affected: 2.8; 2.8.5.0; 2.71_sp1; 3.0.3; 3.0.4; 3.1.1; +21 more |
| CVE-2003-1471 | – | Dec 31 | MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number Affected: through 6.0.7 |
| CVE-2003-1470 | – | Dec 31 | Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command… Affected: 6.7.5 |
| CVE-2003-1200 | – | Dec 29 | Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi Affected: 6.5.2; 6.7.5; 6.7.9; 6.8.0; 6.8.1; 6.8.2; +3 more |
| CVE-2002-1539 | – | Mar 31 | Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments Affected: 6.0; 6.0.5; 6.0.6; 6.0.7 |
| CVE-2002-1740 | – | Dec 31 | Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder… Affected: 5.0; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +1 more |
| CVE-2002-1738 | – | Dec 31 | Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email Affected: 5.0; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +1 more |
| CVE-2001-0583 | – | Aug 22 | Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at… Affected: 3.5.4; 3.5.4 |
| CVE-2001-0584 | – | Aug 22 | IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands Affected: 3.5.6 |
| CVE-2001-0104 | – | Feb 12 | MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key Affected: 3.5.1 |
| CVE-2001-0064 | – | Feb 12 | Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string Affected: 3.5.0 |
| CVE-2000-1020 | – | Dec 11 | Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL Affected: 3.1.1 |
| CVE-2000-1021 | – | Dec 11 | Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL Affected: 3.1.1 |
| CVE-2000-0716 | – | Oct 20 | WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack… Affected: 2.8 |
| CVE-2000-0501 | – | Jun 16 | Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server Affected: 2.8.5.0 |
| CVE-2000-0399 | – | May 24 | Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name Affected: 3.0.3; 3.1_beta |
Showing 28