Alt-N: Security Vulnerabilities
Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at port 3000, or (2) the Webconfig service at port 3001.
CVSS Score
5.0
EPSS Score
0.007
Published
2001-08-22
IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands.
CVSS Score
2.1
EPSS Score
0.002
Published
2001-08-22
Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string.
CVSS Score
5.0
EPSS Score
0.006
Published
2001-02-12
MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key.
CVSS Score
7.2
EPSS Score
0.001
Published
2001-02-12
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
CVSS Score
7.5
EPSS Score
0.013
Published
2000-12-11
Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
CVSS Score
7.5
EPSS Score
0.095
Published
2000-12-11
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.
CVSS Score
2.6
EPSS Score
0.004
Published
2000-10-20
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS Score
5.0
EPSS Score
0.049
Published
2000-07-12
Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server.
CVSS Score
2.6
EPSS Score
0.02
Published
2000-06-16
Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.
CVSS Score
5.0
EPSS Score
0.007
Published
2000-05-24