PT-2006-1968 · Alt N · Alt-N Mdaemon

Published 2006-02-28 · Updated 2017-07-20 · CVE-2006-0925

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Alt-N MDaemon versions 8.1.1 through 8.1.4 Alt-N MDaemon versions prior to 8.1.4

Description The issue is related to a format string vulnerability in the IMAP4rev1 server, which allows remote attackers to cause a denial of service by creating and listing folders with names containing format string specifiers. This is due to an input validation error that does not properly handle such folder names, potentially causing the application to crash or consume a large amount of system resources.

Recommendations For Alt-N MDaemon versions 8.1.1 through 8.1.4, update to a version later than 8.1.4 to resolve the issue. For Alt-N MDaemon versions prior to 8.1.4, update to a version later than 8.1.4 to resolve the issue. As a temporary workaround, consider restricting the creation of folders with names containing format string specifiers to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-0925

Affected Products

Alt-N Mdaemon

References · 9

• 🔥 https://exploit-db.com/exploits/27329 · Exploit
• http://secunia.com/advisories/18921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0925 · Security Note
• http://nsag.ru/vuln/888.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0925 · Note
• http://securitylab.ru/vulnerability/263070.php · Note
• http://securityfocus.com/bid/16854 · Note
• http://vupen.com/english/advisories/2006/0729 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24916 · Note