EUVD-2002-1717

Malware in sbrugna...

CVE-2022-25356

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

CVE-2022-37242

MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter...

CVE-2022-25356

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

MDaemon WorldClient form2raw.cgi From buffer overflow

Added: 09/18/2006 CVE: CVE-2003-1200 BID: 9317 OSVDB: 3255 Background MDaemon is an e-mail server product for Windows. It includes a web mail component called WorldClient. Problem A buffer overflow in MDaemon WorldClient allows remote command execution by sending a web request for the form2raw.cg...

Rosiello Security's exploit for MDaemon

© Rosiello Security http://www.rosiello.org Bug found by hat-squad security. Background by securiteam.com MDaemon offers a full range of mail server functionality. MDaemon protects your users from spam and viruses, provides full security, includes seamless web access to your email via WorldClient...

MDaemon WorldClient 5.0.x - Folder Creation Buffer Overflow

source: https://www.securityfocus.com/bid/4689/info MDaemon is an integrated mail transport agent, webmail, and mail anti-virus package. It is available for Microsoft Windows operating systems. It may be possible for a remote user to take advantage of a buffer overflow in the MDaemon software...

Bypass MDaemon 3.5.1 "Lock Server" Protection

Ok, This is my second post in the years and I have been reading all your postings so far. You all are doing a great job indeed. I would like to point out a security problem in MDaemon mail server even in ver 3.5.1 the latest. My setup: Windows NT 4.0 server SP 6.0a MDaemon Pro ver 3.5.1 The lates...

Session hijacking in Alt-N's MDaemon 2.8

Hi, Here's a bugreport and a fix for MDaemon 2.8. Problem: It is possible to hijack an HTTP session from MDaemon / WorldClient Standard version 2.8 Description: MDaemon 2.8 comes with WorldClient Standard which allows you to read your mail using a browser. When you receive an HTML formatted page...

Переполнение буфера в MDaemon

Классичесоке переполнение буфера при длинном имени пользователя...