Релэинг через MDaemon (message relaying)

Возможен релеинг любых писем используя адрес mdaemon@ SMTP-конверта...

CVE-2001-0583

CVE-2001-0583 affects Alt-N Technologies MDaemon 3.5.4. A remote attacker can cause a denial of service by issuing a request to a MS-DOS device endpoint (e.g., GET /aux) on the Worldclient service (port 3000) or the Webconfig service (port 3001). The available documents do not provide remediation...

CVE-2001-0584

IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service hang via long 1 SELECT or 2 EXAMINE commands...

CVE-2001-0584

MDaemon IMAP Server DoS (CVE-2001-0584): The Affected product is Alt-N Technologies MDaemon IMAP Server, version around 3.5.6. The vulnerability is triggered by sending too long arguments to the SELECT or EXAMINE commands, causing the server to crash (denial of service) for remote clients. Root c...

CVE-2001-0583

Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...

CVE-2001-0583: Undefined Security Weakness

Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...

CVE-2001-0584: Undefined Security Weakness

IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service hang via long 1 SELECT or 2 EXAMINE commands...

MDaemon IMAP Denial Of Service

Advisory Name:MDaemon IMAP Denial Of Service Discovered:23rd Of March 2001 Application:Alt-N Technologies MDaemon 3.5.6 - Other versions most likely prior to this Platform:Windows 2k,95/98/NT - others unknown Severity:Denial of service from application Credit:[email protected] Vendor Status:Unkno...

Alt-N MDaemon 3.5.65.0.76.x - IMAP Denial of Service

Alt-N MDaemon 3.5.65.0.76.x - IMAP Denial of Service source: https://www.securityfocus.com/bid/2508/info A successfully logged-in user, via IMAP, could cause MDaemon to terminate the connection. If the user submits either a 'SELECT' or 'EXAMINE' command appended with 250 or more characters, MDaem...

Alt-N MDaemon 3.5.6/5.0.7/6.x - IMAP Denial of Service

source: https://www.securityfocus.com/bid/2508/info A successfully logged-in user, via IMAP, could cause MDaemon to terminate the connection. If the user submits either a 'SELECT' or 'EXAMINE' command appended with 250 or more characters, MDaemon will refuse any new connections to the IMAP servic...

DoS через DOS-устройства в MDaemon

Запрос типа http://www.foo.org:3000/aux приводит к зависанию служб Worldclient Webconfig...

def-2001-11: MDaemon 3.5.4 Dos-Device DoS

====================================================================== Defcom Labs Advisory def-2001-11 MDaemon 3.5.4 Dos-Device DoS Author: Peter Grьndl [email protected] Release Date: 2001-03-15 ======================================================================...

CVE-2001-0064

Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string...

CVE-2001-0104

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key...

CVE-2001-0104

MDaemon Pro 3.5.1 and earlier have a local privilege bypass: a user can bypass the "lock server" security setting by pressing Cancel at the password prompt and then pressing Enter. The available documents confirm the affected product and UI-based trigger, but do not provide concrete mitigation st...

CVE-2001-0064

Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string...

CVE-2001-0104

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key...

CVE-2001-0064

MDaemon IMAP Server DoS (CVE-2001-0064): The vulnerability affects MDaemon Webconfig/IMAP in versions up to 3.5.0 and earlier, where a remote attacker can crash the service by sending a long URL/argument terminated by a CRLF (LOGIN) string. OpenVAS/Nessus entries confirm remote DoS via long input...

CVE-2001-0064: Undefined Security Weakness

Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string...

CVE-2001-0104: Undefined Security Weakness

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key...