Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mdaemon 任意代码执行漏洞
Vulnerability Description
MDaemon安装MDaemon应用程序文件夹时使用不安全许可(用户创建文件/目录)，本地用户可通过在MDaemon\APP目录中创建恶意RASAPI32.DLL或MPRAPI.DLL 库(由于不安全许可，这是不信任的检索路径元素)，来执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A