Cross-Site Scripting Vulnerability in Alt-N MDaemon Webmail
CVE-2005-4209

Currently unrated

Key Information:

Vendor

Alt-n

Status
Mdaemon
Worldclient
Vendor
CVE Published:
13 December 2005

What is CVE-2005-4209?

The WorldClient webmail interface in Alt-N MDaemon version 8.1.3 is vulnerable to a cross-site scripting issue. This flaw allows remote attackers to exploit the system by injecting script tags into the Subject header of email messages. As a result, arbitrary users may be prevented from accessing their inboxes, leading to disruptions in email service and potential data exposure. Users and administrators must take immediate action to mitigate this risk and secure their email communications.

References

http://www.ipomonis.com/advisories/mdaemon.zip
x_refsource_MISC
http://www.securityfocus.com/bid/15815
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/23551
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.