CVEvulnerability

CVE-2006-4364

5.0 MEDIUM Published 2006-08-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands.

Affected configurations

• alt-n mdaemon 2.8 • alt-n mdaemon 2.8.5.0 • alt-n mdaemon 2.71 sp1 • alt-n mdaemon 3.0.3 • alt-n mdaemon 3.0.4 • alt-n mdaemon 3.1.1 • alt-n mdaemon 3.1.2 • alt-n mdaemon 3.1 beta • alt-n mdaemon 3.5.0 • alt-n mdaemon 3.5.1 • alt-n mdaemon 3.5.4 • alt-n mdaemon 3.5.6 • alt-n mdaemon 5.0 • alt-n mdaemon 5.0.1 • alt-n mdaemon 5.0.2 • alt-n mdaemon 5.0.3 • alt-n mdaemon 5.0.4 • alt-n mdaemon 5.0.5 • alt-n mdaemon 5.0.6 • alt-n mdaemon 5.0.7 • alt-n mdaemon 6.0 • alt-n mdaemon 6.0.5 • alt-n mdaemon 6.0.6 • alt-n mdaemon 6.0.7 • alt-n mdaemon 6.5.0 • alt-n mdaemon 6.5.1 • alt-n mdaemon 6.5.2 • alt-n mdaemon 6.7.5 • alt-n mdaemon 6.7.9 • alt-n mdaemon 6.8.0 • alt-n mdaemon 6.8.1 • alt-n mdaemon 6.8.2 • alt-n mdaemon 6.8.3 • alt-n mdaemon 6.8.4 • alt-n mdaemon 6.8.5 • alt-n mdaemon 7.2 • alt-n mdaemon 8.1.1 • alt-n mdaemon 8.1.3 • alt-n mdaemon 8.1.4 • alt-n mdaemon 9.0.1 • alt-n mdaemon 9.0.2 • alt-n mdaemon 9.0.3 • alt-n mdaemon 9.0.4 • alt-n mdaemon 9.0.5

References