WebAdmin Module for MDaemon Unspecified Privilege Escalation Vulnerability

Bugtraq ID:	19631
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 21 2006 12:00AM
Updated:	Aug 30 2006 04:38PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Alt-N WebAdmin 3.0.4 Alt-N WebAdmin 3.0.3 Alt-N WebAdmin 3.0.2 Alt-N WebAdmin 3.24
Not Vulnerable:	Alt-N WebAdmin 3.25

WebAdmin Module for MDaemon Unspecified Privilege Escalation Vulnerability

WebAdmin Module for MDaemon can allow remote authenticated attackers to gain elevated system privileges.

Versions 3.00 to 3.24 are reported vulnerable; other versions may also be affected.

WebAdmin Module for MDaemon Unspecified Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

WebAdmin Module for MDaemon Unspecified Privilege Escalation Vulnerability

Solution:
The vendor released version 3.25 to address this issue. Please see the references for details.

WebAdmin Module for MDaemon Unspecified Privilege Escalation Vulnerability

References:

• WebAdmin Product Homepage (Alt-N)
  
• WebAdmin Release Notes (Alt-N)