CVE-2012-2584

Multiple cross-site scripting XSS vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 the Cascading Style Sheets CSS expression property in conjunction with a CSS comment within the STYLE attribute of an IMG...

Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...

Alt-N MDaemon Free 12.5.4 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported to CERT...

Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting

Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported t...

MDaemon WorldClient < 12.0.3 Summary Page Email Subject XSS

According to its banner, the version of MDaemon's WorldClient webmail client running on this port is earlier than 12.0.3. The LookOut theme in such versions reportedly may interpret JavaScript in a message subject in the Summary view. By sending a specially crafted email to a user who reads mail...

Alt-N MDaemon 6.8.5 - WorldClient 'form2raw.cgi' Remote Stack Buffer Overflow (Metasploit)

$Id: mdaemonworldclientform2raw.rb 9653 2010-07-01 23:33:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Alt-N MDaemon WorldClient Service Memory Corruption (CVE-2008-2631)

A memory corruption vulnerability exists in Alt-N Technologies MDaemon WorldClient. The vulnerability is due to a NULL pointer dereference in processing a malicious HTTP POST request. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the...

Mdaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow

Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow. CVE-2004-1520. Remote exploit for windows platform $Id: mdaemoncrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploi...

Alt-N MDaemon 9.6.4 - IMAPD FETCH Buffer Overflow (Metasploit)

$Id: mdaemonfetch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Alt-N MDaemon SUBSCRIBE Remote Information Disclosure Vulnerability

MDaemon is prone to an information-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to gain access to information from arbitrary files on the vulnerable server. MDaemon 11.0.1 is vulnerable; other versions may also...

Alt-N MDaemon <= 11.0.1 SUBSCRIBE Information Disclosure Vulnerability

MDaemon is prone to an information disclosure vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure

MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can ...

MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure

MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotely, even accessing files on SMB shar...

MDaemon Mailer Daemon Version 11.0.1 (LATEST) Remote File Disclosure

Exploit for windows platform in category remote exploits ==================================================================== MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure ==================================================================== MDaemon Mailer Daemon Version 11.0....

MDaemon directory traversal

Directory traversal on mailing list configuration files allows to access files with LocalSystem privileges...

Alt-N MDaemon 11.0.1邮件列表订阅目录遍历漏洞

Alt-N MDaemon是一款基于Windows的邮件服务程序，WorldClient是其客户端。 MDaemon支持邮件列表功能。在配置邮件列表时，MDaemon会将邮件列表的配置存储在MDaemonDir（通常为 C:\MDaemon）\App目录下扩展名为grp的文件中，邮件列表组文件大致为： ---snip--- Mailing List file ; ListName = [email protected] ; Private = N ; HideFromAddressBook = N ; AllowExpn = Y ; ListNameInSubject = Y...

MDaemon Mailer Daemon Version 11.0.1 &#40;LATEST&#41; Remote File Disclosure

MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotely, even accessing files on SMB shar...

MDaemon Mailer Daemon 11.0.1 File Disclosure

MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotely, even accessing files on SMB shar...

Alt-N MDaemon < 11.0.1 Multiple Remote DoS Vulnerabilities

Binary data 5517.prm...

Alt-N MDaemon < 11.0.1 Multiple Remote DoS

The remote Windows host contains a version of Alt-N MDaemon that is earlier than 11.0.1. As such, it is prone to multiple remote denial of service attacks. An attacker may exploit these issues to deny the application's services to legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security,...