CVE-2005-0318

CVE-2005-0318 concerns Alt-N WebAdmin 3.0.4, where useredit_account.wdm fails to properly validate edits by the logged-in user. The root cause is insufficient validation of the account-edit parameter, enabling remote authenticated users to modify other users’ account information via a tampered us...

Multiple vulnerabilities in Alt-N WebAdmin <= 3.0.2

WebAdmin is a web application to administer MDaemon and RelayFax. It can be run on its own or as an ISAPI application under Microsoft Internet Information Services IIS. MDaemon is an e-mail server for Microsoft Windows. RelayFax is a fax server also for Microsoft Windows. Both applications have...

Alt-N WebAdmin MDaemon/RelayFax administration tool multiple bugs

Crossit scripting, user accounts editing, code execution...

Alt-N WebAdmin < 3.0.3 Multiple Remote Vulnerabilities

Binary data 2572.prm...

CVE-2005-0318

usereditaccount.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter...

CVE-2005-0319

Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting XSS and phishing...

Alt-N WebAdmin Multiple Remote Vulnerabilities (XSS, Bypass Access)

The remote host is running Alt-N WebAdmin, a web interface to MDaemon mail server. The remote version of this software is affected by cross-site scripting vulnerabilities due to a lack of filtering on user-supplied input in the file 'usereditaccount.wdm' and the file 'modalframe.wdm'. An attacker...

alt-n WebAdmin 3.0.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/12395/info Alt-n WebAdmin is reportedly affected by multiple remote vulnerabilities. The application is affected by multiple cross-site scripting issues. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an...

Security fix for the ALT Linux 9 package wireshark version 0.10.9-alt1

Jan. 22, 2005 Sir Raorn 0.10.9-alt1 - 0.10.9 - Fixed: + CAN-2004-1139 + CAN-2004-1140 + CAN-2004-1141 + CAN-2004-1142 + CAN-2005-0006 + CAN-2005-0007 + CAN-2005-0008 + CAN-2005-0009 + CAN-2005-0010 + CAN-2005-0084 - Debian fixes: Fixed dissectcmipInvokeIDType declaration FTBFS with gcc-4.0...

Security fix for the ALT Linux 5 package xpdf version 3.00-alt5pl3

Jan. 19, 2005 Victor Forsyuk 3.00-alt5pl3 - Add patch to address CAN-2005-0064. - Add patch to set 'match' as default psPaperSize. - Fix bug 5659 patch from Debian...

Immunity Canvas: MDAEMON

Name| mdaemon ---|--- CVE| CVE-2004-2292 Exploit Pack| CANVAS Description| mdaemon imap Notes| CVSS: 5.0 Date public: 05/17/2004 VENDOR: Alt-N CVE Url: https://vulners.com/cve/CVE-2004-2292 CVE Name: CVE-2004-2292...

CVE-2004-2292

Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service application crash via a long STATUS command to the IMAP server...

CVE-2004-2504

The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges...

Security fix for the ALT Linux 10 package apache2 version 2.0.52-alt3

Dec. 27, 2004 Sviatoslav Sviridov 2.0.52-alt3 - updated alt-configure patch to check for available libldap and link with libldap - applied patches: + httpd-2.0.52-sslauth.patch + httpd-2.0.52-SSLCipherSuite-bypass-CAN-2004-0885.diff + httpd-2.0.52-memory-consumption-DoS-CAN-2004-0942.diff +...

Security fix for the ALT Linux 9 package apache2 version 2.0.52-alt3

Dec. 27, 2004 Sviatoslav Sviridov 2.0.52-alt3 - updated alt-configure patch to check for available libldap and link with libldap - applied patches: + httpd-2.0.52-sslauth.patch + httpd-2.0.52-SSLCipherSuite-bypass-CAN-2004-0885.diff + httpd-2.0.52-memory-consumption-DoS-CAN-2004-0942.diff +...

Security fix for the ALT Linux 5 package xpdf version 3.00-alt4pl2

Dec. 22, 2004 Victor Forsyuk 3.00-alt4pl2 - Add patch to address CAN-2004-1125 vulnerability...

Security fix for the ALT Linux 6 package cscope version 15.5-alt2

Dec. 1, 2004 Sir Raorn 15.5-alt2 - CAN-2004-0996...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.2.10-alt1

Nov. 24, 2004 Alexei Takaseev 2.2.10-alt1 - 2.2.10 - CAN-2004-1015...

Alt-N MDaemon File Creation Local Privilege Escalation

Binary data 2430.prm...

Security fix for the ALT Linux 5 package sudo version 1:1.6.7p5-alt4

Nov. 12, 2004 Dmitry V. Levin 1:1.6.7p5-alt4 - Backported upstream fix that restricts exporting of shell functions and CDPATH shell variable CAN-2004-1051. - Added help to control...