CVE

Id
20724  
CVE No.
CVE-2006-4620  
Status
Candidate  
Description
The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox of another account.  
Phase
Assigned (20060906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
195750 20724 CVE-2006-4620 BUGTRAQ:20060904 TTG0602 - Alt-N WebAdmin MDaemon Account Hijacking  View
195751 20724 CVE-2006-4620 URL:http://www.securityfocus.com/archive/1/archive/1/445153/100/0/threaded  View
195752 20724 CVE-2006-4620 MISC:http://www.teklow.com/advisories/TTG0602.txt  View
195753 20724 CVE-2006-4620 CONFIRM:http://files.altn.com/WebAdmin/Release/RelNotes_en.txt  View
195754 20724 CVE-2006-4620 OSVDB:28548  View
195755 20724 CVE-2006-4620 URL:http://www.osvdb.org/28548  View
195756 20724 CVE-2006-4620 SECUNIA:21727  View
195757 20724 CVE-2006-4620 URL:http://secunia.com/advisories/21727  View
195758 20724 CVE-2006-4620 SREASON:1516  View
195759 20724 CVE-2006-4620 URL:http://securityreason.com/securityalert/1516  View
195760 20724 CVE-2006-4620 XF:webadmin-mdaemon-privilege-escalation(28776)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58942 JVNDB-2006-001208 AnnonceV の annonce.php における PHP リモートファイルインクルージョンの脆弱性 AnnonceV の annonce.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4622 20724 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001208.html  View