114 matches found
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported t...
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...
Alt-N MDaemon 9.6.4 - IMAPD FETCH Buffer Overflow (Metasploit)
$Id: mdaemonfetch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Alt-N MDaemon SUBSCRIBE Remote Information Disclosure Vulnerability
MDaemon is prone to an information-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to gain access to information from arbitrary files on the vulnerable server. MDaemon 11.0.1 is vulnerable; other versions may also...
Alt-N MDaemon < 11.0.1 Multiple Remote DoS Vulnerabilities
Binary data 5517.prm...
Alt-N MDaemon < 11.0.1 Multiple Remote DoS
The remote Windows host contains a version of Alt-N MDaemon that is earlier than 11.0.1. As such, it is prone to multiple remote denial of service attacks. An attacker may exploit these issues to deny the application's services to legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security,...
MDaemon 9.6.4 IMAPD FETCH Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MDaemon 9.6....
Alt-N MDaemon POP3 Server USER and APOP Commands Buffer Overflow (CVE-2006-4364)
Alt-N MDaemon is an email server product that supports a rich set of message exchanging protocols. The Post Office Protocol version 3 POP3 allows for the retrieving of electronic mail over a TCP/IP connection. The MDaemon POP3 server is a server side implementation of the protocol. The default...
CVE-2008-6967
Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...
Cross site scripting
Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...
CVE-2008-6967
The CVE-2008-6967 entry concerns Alt-N MDaemon WorldClient in versions up to 10.0.1, with multiple unspecified vulnerabilities in WorldClient potentially involving cross-site scripting (XSS). The connected documents corroborate affected product (MDaemon/WorldClient), imply an XSS-related risk, an...
CVE-2008-6967
Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...
Cross site scripting
Cross-site scripting XSS vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag...
CVE-2008-6893
Cross-site scripting XSS vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag...
CVE-2008-6893
Cross-site scripting XSS vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag...
CVE-2008-6893
The CVE-2008-6893 entry describes a Cross-site scripting (XSS) vulnerability in Alt-N MDaemon WorldClient 10.0.2 when used with Internet Explorer 7. An attacker can inject arbitrary web script or HTML via a crafted img tag. The base information indicates a client/browser interaction enabling scri...
MDaemon Server WorldClient脚本注入漏洞
BUGTRAQ ID: 32355 Alt-N MDaemon是一款基于Windows的邮件服务程序，WorldClient是其客户端。 MDaemon的WorldClient客户端没有正确地过滤邮件中的某些HTML标签，如果远程攻击者在邮件中注入了恶意HTML和脚本代码的话，则用户在查看邮件的时候就会在浏览器会话中执行注入的内容。 Alt-N MDaemon 10.0.1 Alt-N ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.altn.com...
MDaemon 9.6.4 IMAPD FETCH Buffer Overflow
This module exploits a stack buffer overflow in the Alt-N MDaemon IMAP Server version 9.6.4 by sending an overly long FETCH BODY command. Valid IMAP account credentials are required. Credit to Matteo Memelli This module requires Metasploit: https://metasploit.com/download Current source:...
Preemptive Protection against Alt-N MDaemon IMAP Server FETCH Command Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in the Alt-N MDaemon IMAP Server. The MDaemon IMAP server is a server side implementation of the IMAP protocol. Internet Message Access Protocol IMAP is a standard protocol for accessing e-mail from a local server that provides management of...