PT-2001-1339 · Alt N Technologies · Mdaemon Pro

Published 2001-02-02 · Updated 2017-12-19 · CVE-2001-0104

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MDaemon Pro versions 3.5.1 and earlier

Description: The issue allows local users to bypass the lock server security setting. This can be achieved by pressing the Cancel button at the password prompt and then pressing the enter key.

Recommendations: For MDaemon Pro versions 3.5.1 and earlier, consider disabling the lock server security setting temporarily until a fix is available, or apply specific configuration changes as recommended by the software vendor to mitigate this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-0104

Affected Products

Mdaemon Pro

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0104 · Security Note
• http://securityfocus.com/bid/2115 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5763 · Note
• http://securityfocus.com/archive/1/151156 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0104 · Note