Filtered by vendor Alt-n Subscriptions
Filtered by product Mdaemon Subscriptions
Total 28 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-4209 1 Alt-n 2 Mdaemon, Worldclient 2025-04-03 N/A
WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability.
CVE-2003-1470 1 Alt-n 1 Mdaemon 2025-04-03 N/A
Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.
CVE-2006-2646 1 Alt-n 1 Mdaemon 2025-04-03 N/A
Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a long A0001 argument that begins with a '"' (double quote).
CVE-2003-1471 1 Alt-n 1 Mdaemon 2025-04-03 N/A
MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number.
CVE-2000-0399 1 Alt-n 1 Mdaemon 2025-04-03 N/A
Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.
CVE-2002-1740 1 Alt-n 2 Mdaemon, Worldclient 2025-04-03 N/A
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter).
CVE-2006-4364 1 Alt-n 1 Mdaemon 2025-04-03 N/A
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands.
CVE-2003-1200 1 Alt-n 1 Mdaemon 2025-04-03 N/A
Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.