Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Alt-N MDaemon/WorldClient邮件标题跨站脚本攻击漏洞
Vulnerability Description
Alt-N MDaemon是美国Alt-N公司的一套集成了SMTP、POP3和IMAP4协议的邮件服务系统。该系统支持自动处理电子邮件、防范垃圾邮件和防御邮件病毒等。 Alt-N MDaemon在处理邮件标题时存在跨站脚本攻击漏洞。远程攻击者可利用此漏洞使用户执行一些恶意代码。如果用户使用Worldclient服务(默认在3000端口)接收邮件消息的话，浏览器就会自动重新定向到指定用户的收件箱文件夹。但攻击者可以通过发送标题中包含有一些JavaScript的消息来阻断用户的收件箱文件夹，导致无法使用该文件
CVSS Information
N/A
Vulnerability Type
N/A