Alt-N MDaemon WorldClient Denial Of Service Vulnerability

Bugtraq ID:	15815
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 12 2005 12:00AM
Updated:	Dec 12 2005 12:00AM
Credit:	dr_insane is credited with the discovery of this vulnerability.
Vulnerable:	Alt-N WorldClient 8.1.3 Alt-N MDaemon 8.1.3
Not Vulnerable:

Alt-N MDaemon WorldClient Denial Of Service Vulnerability

MDaemon WorldClient is prone to a denial of service vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to prevent a user from accessing their mail remotely through the WorldClient client application.

Alt-N MDaemon WorldClient Denial Of Service Vulnerability

No exploit is required.

The following is suitable as a Subject field to exploit this issue:
<script></script>

Alt-N MDaemon WorldClient Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Alt-N MDaemon WorldClient Denial Of Service Vulnerability

References:

• Advisories Page (dr_insane)
  
• Alt-N Homepage (Alt-N)
  
• Imoel-CMS Homepage (Imoel)
  
• WorldClient Product Homepage (Alt-N)
  
• IMOEL CMS Sql password discovery ([email protected])