Vulnerability CVE-2006-4620
Published: 2006-09-06   Modified: 2012-02-12

Description:
The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox of another account.

See advisories in our WLB2 database:
Topic
Author
Date
Low
Alt-N WebAdmin MDaemon Account Hijacking
TTG (releases te...
08.09.2006

Type:

CWE-Other

CVSS2 => (AV:N/AC:H/Au:S/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Remote
High
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Alt-n -> Webadmin 

 References:
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt
http://securityreason.com/securityalert/1516
http://www.securityfocus.com/archive/1/445153/100/0/threaded
http://www.teklow.com/advisories/TTG0602.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/28776
Copyright 2024, cxsecurity.com

 

Back to Top