Alt-N WebAdmin MDaemon/RelayFax administration tool multiple bugs

Crossit scripting, user accounts editing, code execution...

CVE-2004-2504

The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges...

CVE-2004-2292

Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service application crash via a long STATUS command to the IMAP server...

CVE-2004-1546

Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service application crash via a long 1 SAML, SOML, SEND, or MAIL command to the SMTP server or 2 LIST command to the IMAP server...

Immunity Canvas: MDAEMON

Name| mdaemon ---|--- CVE| CVE-2004-2292 Exploit Pack| CANVAS Description| mdaemon imap Notes| CVSS: 5.0 Date public: 05/17/2004 VENDOR: Alt-N CVE Url: https://vulners.com/cve/CVE-2004-2292 CVE Name: CVE-2004-2292...

mdaemon72.txt

Summary: A privilege escalation flaw exists in MDaemon 7.2 http://www.mdaemon.com. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the MDaemon tray icon. Vulnerable Versions: MDaemon 7.2 Solutions: The vendor was notified of the issue. Ther...

MDaemon privilege escalation

It's possible to run application with LocalSytem privileges...

Privilege escalation flaw in MDaemon 7.2.

Summary: A privilege escalation flaw exists in MDaemon 7.2 http://www.mdaemon.com. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the MDaemon tray icon. Vulnerable Versions: MDaemon 7.2 Solutions: The vendor was notified of the issue. Ther...

MDaemon File Creation Local Privilege Escalation

It is reported that versions of MDaemon up to and including 7.2.0 are affected by a local privilege escalation vulnerability. An local attacker may increase his privilege and execute code with SYSTEM privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'...

Alt-N MDaemon File Creation Local Privilege Escalation

Binary data 2430.prm...

MDaemon buffer overflows

Buffer overflows in multiple SMTP and IMAP commands...

MDaemon POP Server User Name Overflow DoS

The remote host is running the MDaemon POP server. It is possible to crash the remote service by sending a too long 'user' command. This problem allows an attacker to make the remote MDaemon service crash, thus preventing legitimate users from receiving emails. C Tenable Network Security, Inc...

MDaemon IMAP Server Multiple Command Local DoS

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this software by sending a too long argument to the 'SELECT' or 'EXAMINE' commands. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receiving...

MDaemon Webconfig IMAP Malformed URL DoS

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this software sending a long argument to the 'LOGIN' command. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receiving emails. C Tenable Netwo...

Alt-N MDaemon Multiple Buffer Overflows (SMTP)

Binary data 2311.prm...

Alt-N MDaemon Multiple Buffer Overflows (IMAP)

Binary data 2310.prm...

MDaemon < 6.5.2 Multiple Remote Buffer Overflows

According to its banner, the version of MDaemon running on the remote host has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Alt-N MDaemon 6.5.1 - IMAPSMTP Remote Buffer Overflow

Alt-N MDaemon 6.5.1 - IMAPSMTP Remote Buffer Overflow ///////////////////////////////////////////////////////////// // Remote proof-of-concept exploit // // for // // Mdaemon IMAP server v6.5.1 // // and // // possible other version. // // Find bug: DBuG. // // Author: DBuG. // // [email protected] // /...

Alt-N MDaemon 6.5.1 - IMAP/SMTP Remote Buffer Overflow

///////////////////////////////////////////////////////////// // Remote proof-of-concept exploit // // for // // Mdaemon IMAP server v6.5.1 // // and // // possible other version. // // Find bug: DBuG. // // Author: DBuG. // // [email protected] // // Data: 16/09/2004 // // NOT PUBLIC! // // //...

MDaemon 6.5.1 IMAP/SMTP Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== MDaemon 6.5.1 IMAP/SMTP Remote Buffer Overflow Exploit ====================================================== ///////////////////////////////////////////////////////////// // Remote...