MDaemon IMAP AUTHENTICATE command buffer overflow

Added: 03/01/2006 BID: 14317 OSVDB: 18069 Background MDaemon is an e-mail server for Windows. Problem The IMAP service in MDaemon is affected by buffer overflow vulnerabilities in the AUTHENTICATE LOGIN and AUTHENTICATE CRAM-MD5 commands which can be exploited without logging into the server...

MDaemon IMAP AUTHENTICATE command buffer overflow

Added: 03/01/2006 BID: 14317 OSVDB: 18069 Background MDaemon is an e-mail server for Windows. Problem The IMAP service in MDaemon is affected by buffer overflow vulnerabilities in the AUTHENTICATE LOGIN and AUTHENTICATE CRAM-MD5 commands which can be exploited without logging into the server...

MDaemon IMAP AUTHENTICATE command buffer overflow

Added: 03/01/2006 BID: 14317 OSVDB: 18069 Background MDaemon is an e-mail server for Windows. Problem The IMAP service in MDaemon is affected by buffer overflow vulnerabilities in the AUTHENTICATE LOGIN and AUTHENTICATE CRAM-MD5 commands which can be exploited without logging into the server...

Format string

Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service CPU consumption by creating and then listing folders whose names contain format string specifiers...

CVE-2006-0925

Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service CPU consumption by creating and then listing folders whose names contain format string specifiers...

CVE-2006-0925

CVE-2006-0925 affects the IMAP server component (IMAP4rev1) of Alt-N MDaemon 8.1.1 (and possibly 8.1.4). The vulnerability is a format string flaw in folder-name handling that, when an attacker creates and lists folders containing format specifiers, can cause the server to suffer CPU exhaustion a...

CVE-2006-0925

Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service CPU consumption by creating and then listing folders whose names contain format string specifiers...

MDaemon < 8.15 IMAP Mail Folder Name Remote Overflow

Binary data 3449.prm...

MDaemon IMAP Server Mail Folder Name Format String

The remote host is running Alt-N MDaemon, an SMTP/IMAP server for the Windows operating system family. The IMAP server component of MDaemon is affected by a format string vulnerability involving folders with format string specifiers in their names . An authenticated attacker can leverage this iss...

Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String

Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String source: https://www.securityfocus.com/bid/16854/info Alt-N MDaemon IMAP Server is affected by a remote format-string vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in the...

Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String

source: https://www.securityfocus.com/bid/16854/info Alt-N MDaemon IMAP Server is affected by a remote format-string vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in the format-specifier argument to a formatted printing...

CVE-2005-4266

WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value...

CVE-2005-4266

The CVE-2005-4266 issue affects Alt-N MDaemon/WorldClient (WorldClient.dll) where WorldClient 8.1.3 trusts a Session parameter containing a randomly generated session ID linked to a username. This enables remote attackers to impersonate other users by guessing or sniffing the session value. Conne...

CVE-2005-4266

WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value...

CVE-2005-4209

WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting XSS...

CVE-2005-4209

CVE-2005-4209 concerns WorldClient webmail in Alt-N MDaemon 8.1.3. The issue arises from script tags in the Subject header, enabling cross‑site scripting that can prevent users from accessing their Inbox. The vulnerability is described as impacting availability (partial) without affecting confide...

Alt-N MDaemon WorldClient 8.1.3 - Denial of Service

Alt-N MDaemon WorldClient 8.1.3 - Denial of Service source: https://www.securityfocus.com/bid/15815/info MDaemon WorldClient is prone to a denial of service vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...

Alt-N MDaemon WorldClient 8.1.3 - Denial of Service

source: https://www.securityfocus.com/bid/15815/info MDaemon WorldClient is prone to a denial of service vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to prevent a user from accessing their mai...

Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow

This module exploits a buffer overflow in the CRAM-MD5 authentication of the MDaemon IMAP service. This vulnerability was discovered by Muts. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

MDaemon mail server DoS

The remote host is running the MDaemon POP server. It is possible to crash the remote service by sending a too long 'user' command. This problem allows an attacker to make the remote MDaemon server crash, thus preventing legitimate users from receiving e-mails. OpenVAS Vulnerability Test $Id:...