CVE-2006-4364 in MDaemon

Sumário (Inglês)

Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain @ characters in the (1) USER and (2) APOP commands.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

25/08/2006

Divulgação

26/08/2006

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
2484	Alt-N MDaemon POP3 Server Excesso de tampão	122	Prova de conceito	Correção oficial	CVE-2006-4364

Fontes

• MITRE
• NVD
• CVE Details