135 matches found
CVE-2002-1740
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name NewFolder parameter...
CVE-2002-1741
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." dot dot in the Attachments parameter...
Multiple Vulnerabilities in MDaemon + WorldClient
Advisory Title: Multiple Vulnerabilities in MDaemon + WorldClient Release Date: 07/05/2002 Application: WorldClient and MDaemon Platform: Windows Clients. Version: MDaemon/WorldClient 5.0.5.0 - and probably earlier versions Severity: Several Vulnerabilities - one of which gives system access...
MDaemon WorldClient 5.0.x - Folder Creation Buffer Overflow
MDaemon WorldClient 5.0.x - Folder Creation Buffer Overflow source: https://www.securityfocus.com/bid/4689/info MDaemon is an integrated mail transport agent, webmail, and mail anti-virus package. It is available for Microsoft Windows operating systems. It may be possible for a remote user to tak...
WorldClient 5.0.x - Arbitrary File Deletion
WorldClient 5.0.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary...
MDaemon WorldClient 5.0.x - Folder Creation Buffer Overflow
source: https://www.securityfocus.com/bid/4689/info MDaemon is an integrated mail transport agent, webmail, and mail anti-virus package. It is available for Microsoft Windows operating systems. It may be possible for a remote user to take advantage of a buffer overflow in the MDaemon software...
WorldClient 5.0.x - Arbitrary File Deletion
source: https://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary file on the webserver that it resides on. The...
CVE-2001-0583
Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...
CVE-2001-0583
Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...
CVE-2001-0583: Undefined Security Weakness
Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...
DoS через DOS-устройства в MDaemon
Запрос типа http://www.foo.org:3000/aux приводит к зависанию служб Worldclient Webconfig...
CVE-2000-0716
CVE-2000-0716 affects WorldClient email client in MDaemon 2.8. The session ID is included in the referer header of an HTTP request when the user clicks a URL, allowing the visited site to hijack the session ID and read the user’s email. Exploitation details are not provided in the documents, and ...
CVE-2000-0716
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...
CVE-2000-0716: Undefined Security Weakness
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...
CVE-2000-1020
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL...
CVE-2000-1020
CVE-2000-1020 describes a heap overflow in Worldclient of MDaemon (versions 3.1.1 and earlier) that can be triggered by a long URL, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands. The issue is exploitable over the network without authentication, ...
CVE-2000-1020
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL...
CVE-2000-1020: Undefined Security Weakness
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL...
CVE-2000-0716
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...