CVE-2006-4364

Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:alt-n:mdaemon:2.8:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:2.8.5.0:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:2.71_sp1:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.1_beta:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.5.4:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.5.4:*:pro:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.5.4:*:standard:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:3.5.6:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0:*:pro:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.0:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.0.6:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.0.7:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.5.0:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.5.2:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.7.5:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.7.9:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.8.0:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.8.1:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.8.2:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.8.3:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.8.4:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:6.8.5:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:7.2:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:8.1.1:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:8.1.3:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:8.1.4:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:9.0.1:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:9.0.2:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:9.0.3:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:9.0.4:*:*:*:*:*:*:*
cpe:2.3:a:alt-n:mdaemon:9.0.5:*:*:*:*:*:*:*

History

21 Nov 2024, 00:15

Type Values Removed Values Added
References () http://files.altn.com/MDaemon/Release/RelNotes_en.txt - () http://files.altn.com/MDaemon/Release/RelNotes_en.txt -
References () http://secunia.com/advisories/21595 - Patch, Vendor Advisory () http://secunia.com/advisories/21595 - Patch, Vendor Advisory
References () http://securityreason.com/securityalert/1446 - () http://securityreason.com/securityalert/1446 -
References () http://securitytracker.com/id?1016729 - () http://securitytracker.com/id?1016729 -
References () http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-08-04 - Exploit () http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-08-04 - Exploit
References () http://www.osvdb.org/28125 - () http://www.osvdb.org/28125 -
References () http://www.securityfocus.com/archive/1/444015/100/0/threaded - () http://www.securityfocus.com/archive/1/444015/100/0/threaded -
References () http://www.securityfocus.com/bid/19651 - Exploit () http://www.securityfocus.com/bid/19651 - Exploit
References () http://www.vupen.com/english/advisories/2006/3361 - () http://www.vupen.com/english/advisories/2006/3361 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/28517 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/28517 -
References () https://www.exploit-db.com/exploits/2245 - () https://www.exploit-db.com/exploits/2245 -

Information

Published : 2006-08-27 02:04

Updated : 2024-11-21 00:15


NVD link : CVE-2006-4364

Mitre link : CVE-2006-4364

CVE.ORG link : CVE-2006-4364


JSON object : View

Products Affected

alt-n

  • mdaemon