MDaemon WorldClient < 10.0.2 Script Injection

Binary data 4765.prm...

MDaemon Server WorldClient脚本注入漏洞

BUGTRAQ ID: 32355 Alt-N MDaemon是一款基于Windows的邮件服务程序，WorldClient是其客户端。 MDaemon的WorldClient客户端没有正确地过滤邮件中的某些HTML标签，如果远程攻击者在邮件中注入了恶意HTML和脚本代码的话，则用户在查看邮件的时候就会在浏览器会话中执行注入的内容。 Alt-N MDaemon 10.0.1 Alt-N ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.altn.com...

MDaemon WorldClient < 10.0.2 Email Handling XSS

The remote host is running Alt-N MDaemon, a mail server for Windows. According to its banner, a version of MDaemon mail server older than 10.0.2 is installed on the remote host. Such versions ship with a version of WorldClient a webmail client that is affected by a script injection vulnerability...

Null pointer dereference

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-2631

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-2631

The CVE-2008-2631 issue affects Alt-N Technologies MDaemon WorldClient/WordClient interface. A memory corruption vulnerability arises from a NULL pointer dereference when processing a malicious HTTP POST request, allowing a remote unauthenticated attacker to crash the WorldClient service and caus...

CVE-2008-2631

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

MDaemon WorldClient远程拒绝服务及栈溢出漏洞

Alt-N MDaemon是一款基于Windows的邮件服务程序，WorldClient是其客户端。 WordClient客户端（默认监听于TCP 3000端口）在处理对其发送的HTTP请求时存在空指针引用错误，如果远程攻击者向WorldClient.dll发送了特制的HTTP POST请求的话，就可能导致客户端崩溃。 WordClient接口在处理带有超长Subject字段的Reply请求时存在栈溢出漏洞，如果远程攻击者从WordClient接口发送了特制邮件的话就可以触发这个溢出，导致执行任意代码。成功利用这个漏洞要求在服务器上拥有有效的邮件帐号。 Alt-N MDaemon =...

MDaemon 6.5.1 IMAP/SMTP Remote Buffer Overflow Exploit

No description provided by source. ///////////////////////////////////////////////////////////// // Remote proof-of-concept exploit // // for // // Mdaemon IMAP server v6.5.1 // // and // // possible other version. // // Find bug: DBuG. // // Author: DBuG. // // [email protected] // // Data: 16/09/2004 ...

MDaemon &lt;= 9.6.5 Multiple Remote Buffer Overflow Exploit PoC

No description provided by source. MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site: http://altn.com Risk : Highly Critical hehe funny bugs here .. the worldclient use the port 3000 for a webmail like it use also an admin webmail located at port 1000 by default both are opened this...

MDaemon <= 9.6.5 Multiple Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ============================================================ MDaemon = 9.6.5 Multiple Remote Buffer Overflow Exploit PoC ============================================================ MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site:...

Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows (PoC)

Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows PoC MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site: http://altn.com Risk : Highly Critical hehe funny bugs here .. the worldclient use the port 3000 for a webmail like it use also an admin webmail located at port 1000 by defaul...

Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows (PoC)

MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site: http://altn.com Risk : Highly Critical hehe funny bugs here .. the worldclient use the port 3000 for a webmail like it use also an admin webmail located at port 1000 by default both are opened this file unfortunatly contain multiple...

MDaemon 9.6.4 IMAPD FETCH Buffer Overflow

This module exploits a stack buffer overflow in the Alt-N MDaemon IMAP Server version 9.6.4 by sending an overly long FETCH BODY command. Valid IMAP account credentials are required. Credit to Matteo Memelli This module requires Metasploit: https://metasploit.com/download Current source:...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

Preemptive Protection against Alt-N MDaemon IMAP Server FETCH Command Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in the Alt-N MDaemon IMAP Server. The MDaemon IMAP server is a server side implementation of the IMAP protocol. Internet Message Access Protocol IMAP is a standard protocol for accessing e-mail from a local server that provides management of...

MDaemon IMAP Server FETCH Command Remote Buffer Overflow

According to its banner, the version of MDaemon installed on the remote host contains a stack-based buffer overflow in its IMAP server component that can be triggered via a FETCH command with a long BODY data item. An authenticated, remote attacker may be able to leverage this issue to crash the...