Alt-N MDaemon/WorldClient Form2Raw Mail Header Spoofing Vulnerability

Bugtraq ID:	6816
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 07 2003 12:00AM
Updated:	Feb 07 2003 12:00AM
Credit:	Discovery of this issue is credited to "A K Hooja" <[email protected]>.
Vulnerable:	Altn MDaemon 6.5 .0 Altn MDaemon 6.0.7 Altn MDaemon 6.0.6 Altn MDaemon 6.0.5 Altn MDaemon 6.0 .0 Altn MDaemon 5.0.7 Altn MDaemon 3.5.6 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Altn MDaemon 3.5.4 Altn MDaemon 3.5.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Altn MDaemon 3.5 .0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Altn MDaemon 3.1.2 Altn MDaemon 3.1.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Altn MDaemon 3.0.4 Altn MDaemon 3.0.3 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Altn MDaemon 2.8.5 0 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Altn MDaemon 2.8 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:

Alt-N MDaemon/WorldClient Form2Raw Mail Header Spoofing Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Alt-N MDaemon/WorldClient Form2Raw Mail Header Spoofing Vulnerability

References:

• Alt-N WorldClient Default CGI Configuration Lets Remote Users Send Forged Mail (SecurityTracker)