WebAdmin Module for MDaemon Information Disclosure Vulnerability

Bugtraq ID:	19620
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 21 2006 12:00AM
Updated:	Aug 30 2006 12:53AM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Alt-N WebAdmin 3.0.4 Alt-N WebAdmin 3.0.3 Alt-N WebAdmin 3.0.2 Alt-N WebAdmin 3.24
Not Vulnerable:	Alt-N WebAdmin 3.25

WebAdmin Module for MDaemon Information Disclosure Vulnerability

The WebAdmin Module for MDaemon is prone to an information-disclosure vulnerability because it fails to sanitize user-supplied input.

An attacker can exploit this issue to access sensitive information that could lead to other attacks.

Versions 3.00 to 3.24 are reported vulnerable; other versions may also be affected.

WebAdmin Module for MDaemon Information Disclosure Vulnerability

Attackers can exploit this issue via a web client.

WebAdmin Module for MDaemon Information Disclosure Vulnerability

Solution:
The vendor released version 3.25 to address this issue. Please see the references for details.

WebAdmin Module for MDaemon Information Disclosure Vulnerability

References:

• WebAdmin Product Homepage (Alt-N)
  
• WebAdmin Release Notes (Alt-N)