Alt-N MDaemon Local Insecure Default Directory Permisions Vulnerability

Bugtraq ID:	21127
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 16 2006 12:00AM
Updated:	Mar 19 2015 09:19AM
Credit:	Secunia Security is credited with the discovery of this vulnerability.
Vulnerable:	Alt-N MDaemon 9.0.6 Alt-N MDaemon 9.0.5 Alt-N MDaemon 9.53 Alt-N MDaemon 9.51
Not Vulnerable:

Alt-N MDaemon Local Insecure Default Directory Permisions Vulnerability

MDaemon is prone to a local insecure-default-directory-persmissions vulnerability.

A local attacker could exploit this issue to have arbitrary code execute with SYSTEM-level privileges.

Versions 9.0.5, 9.0.6, 9.51, and 9.53 are vulnerable; other versions may also be affected.

Alt-N MDaemon Local Insecure Default Directory Permisions Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Alt-N MDaemon Local Insecure Default Directory Permisions Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Alt-N MDaemon Local Insecure Default Directory Permisions Vulnerability

References: