Vulnerability record · CVE-2005-4209 · published 13 December 2005

CVE-2005-4209: Alt-n mdaemon code injection vulnerability

AAlt N · Mdaemon

WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability.

4.3 CVSS 2.0 Medium EPSS 2.1% · top 18.6% CWE-94 · Code injection

4.3CVSS 2.0 base score

2.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

8References, 4 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

AMdaemon Alt N AWorldclient Alt N

References

Link	Tags
http://secunia.com/advisories/17990	ExploitVendor Advisory
http://www.ipomonis.com/advisories/mdaemon.zip
http://www.securityfocus.com/bid/15815	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23551
http://secunia.com/advisories/17990	ExploitVendor Advisory
http://www.ipomonis.com/advisories/mdaemon.zip
http://www.securityfocus.com/bid/15815	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23551

Track CVE-2005-4209 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-5709Alt-n mdaemon vulnerabilityUnspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exp…EPSS 1.6%4 Nov 2006 9.0CVE-2003-1470Alt-n mdaemon memory buffer overflow vulnerabilityBuffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbit…EPSS 5.0%31 Dec 2003 7.5CVE-2006-5708Alt-n mdaemon uncontrolled resource consumption vulnerabilityMultiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of servic…EPSS 1.0%4 Nov 2006 7.5CVE-2006-2646Alt-n mdaemon vulnerabilityBuffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a long A0001 argument that begins…EPSS 4.6%30 May 2006 7.5CVE-2005-4266Alt-n mdaemon vulnerabilityWorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated wi…EPSS 1.3%15 Dec 2005 7.5CVE-2003-1200Alt-N MDaemon FORM2RAW.exe stack buffer overflow via From parameterFORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 contains a stack-based buffer overflow reachable through a long From parameter passed to Form2Raw.c…EPSS 65%analysed29 Dec 2003 7.5CVE-2000-1020Alt-n mdaemon vulnerabilityHeap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary command…EPSS 2.3%11 Dec 2000 7.5CVE-2000-1021Alt-n mdaemon vulnerabilityHeap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands …EPSS 3.8%11 Dec 2000

Source: NIST National Vulnerability Database (record CVE-2005-4209), CISA KEV, FIRST EPSS (scores of 2026-10-08). This page is refreshed as NVD updates the record.