CVE-2008-6967

The CVE-2008-6967 entry concerns Alt-N MDaemon WorldClient in versions up to 10.0.1, with multiple unspecified vulnerabilities in WorldClient potentially involving cross-site scripting (XSS). The connected documents corroborate affected product (MDaemon/WorldClient), imply an XSS-related risk, an...

CVE-2008-6967

Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...

CVE-2008-6967: Undefined Security Weakness

Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting XSS and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893...

KLA10249 Vulnerability in MDaemon

Multiple unspecified vulnerabilities were found in MDaemon. By exploiting this vulnerability malicious users can have an unknown impact on vectors related to XSS. Original advisories - Exploitation Related products MDaemon CVE list CVE-2008-6967 warning Solution Update to latest version Impacts S...

CVE-2008-6893

Cross-site scripting XSS vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag...

Cross site scripting

Cross-site scripting XSS vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag...

CVE-2008-6893

Cross-site scripting XSS vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag...

CVE-2008-6893

The CVE-2008-6893 entry describes a Cross-site scripting (XSS) vulnerability in Alt-N MDaemon WorldClient 10.0.2 when used with Internet Explorer 7. An attacker can inject arbitrary web script or HTML via a crafted img tag. The base information indicates a client/browser interaction enabling scri...

CVE-2008-6893: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag...

Deerfield MDaemon Default Password (deprecated)

Binary data 4851.prm...

MDaemon Server < 10.0.2 WordClient Script Insertion Vulnerability

MDaemon is prone to a script insertion vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:altn:mdaemon"; ifdescriptio...

MDaemon Server WorldClient脚本注入漏洞

BUGTRAQ ID: 32355 Alt-N MDaemon是一款基于Windows的邮件服务程序，WorldClient是其客户端。 MDaemon的WorldClient客户端没有正确地过滤邮件中的某些HTML标签，如果远程攻击者在邮件中注入了恶意HTML和脚本代码的话，则用户在查看邮件的时候就会在浏览器会话中执行注入的内容。 Alt-N MDaemon 10.0.1 Alt-N ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.altn.com...

MDaemon WorldClient < 10.0.2 Email Handling XSS

The remote host is running Alt-N MDaemon, a mail server for Windows. According to its banner, a version of MDaemon mail server older than 10.0.2 is installed on the remote host. Such versions ship with a version of WorldClient a webmail client that is affected by a script injection vulnerability...

MDaemon WorldClient < 10.0.2 Script Injection

Binary data 4765.prm...

CVE-2008-2631

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Null pointer dereference

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-2631

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-2631

The CVE-2008-2631 issue affects Alt-N Technologies MDaemon WorldClient/WordClient interface. A memory corruption vulnerability arises from a NULL pointer dereference when processing a malicious HTTP POST request, allowing a remote unauthenticated attacker to crash the WorldClient service and caus...

CVE-2008-2631: Undefined Security Weakness

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

MDaemon WorldClient远程拒绝服务及栈溢出漏洞

Alt-N MDaemon是一款基于Windows的邮件服务程序，WorldClient是其客户端。 WordClient客户端（默认监听于TCP 3000端口）在处理对其发送的HTTP请求时存在空指针引用错误，如果远程攻击者向WorldClient.dll发送了特制的HTTP POST请求的话，就可能导致客户端崩溃。 WordClient接口在处理带有超长Subject字段的Reply请求时存在栈溢出漏洞，如果远程攻击者从WordClient接口发送了特制邮件的话就可以触发这个溢出，导致执行任意代码。成功利用这个漏洞要求在服务器上拥有有效的邮件帐号。 Alt-N MDaemon =...