A remote overflow exists in Alt-N Technologies MDaemon. It fails to validate 'USER' and 'APOP' commands resulting in a heap-based buffer overflow. With a specially crafted request, an attacker can cause boundary errors in POP3 server resulting in a loss of integrity.

Upgrade to version 9.06 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1016729
• Bugtraq ID: 19651
• CVE ID: 2006-4364 (see also: NVD)
• Secunia Advisory ID: 21595
• Milw0rm: 2245 2258
• Exploit Database: 2245 2258
• SCIP VulDB ID: 2484
• ISS X-Force ID: 28517
• VUPEN Advisory: ADV-2006-3361
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-08/0419.html
• Vendor Specific News/Changelog Entry: http://files.altn.com/MDaemon/Release/RelNotes_en.txt
• Other Advisory URL: http://securityreason.com/securityalert/1446
  http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-08-04
• Vendor URL: http://www.altn.com/
• Generic Exploit URL: http://www.infigo.hr/files/mdaemon_poc.pl
  http://www.securiteam.com/exploits/5GP0M20JFQ.html
  http://www.securiteam.com/windowsntfocus/5RP0O0UJFQ.html
• Keyword: INFIGO IS Security Advisory #ADV-2006-08-04

• Leon Juranic - infocusinfigo.hr - Infigo Information Security
• Sasa Jusic - sasa.jusicinfigo.hr - INFIGO IS