← Vulnerability feed

Vulnerability record · CVE-2006-4370 · published 26 August 2006

CVE-2006-4370: Alt-n webadmin vulnerability

AAlt N · Webadmin

Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global administrator's password and gain privileges via the userlist.wdm file.

7.5 CVSS 2.0 High EPSS 1.8% · top 22.3%
7.5CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References
16 Jun 2026Last modified by NVD

Description

Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global administrator's password and gain privileges via the userlist.wdm file.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt Patch
http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html Patch
http://secunia.com/advisories/21558 PatchVendor Advisory
http://securityreason.com/securityalert/1455
http://www.securityfocus.com/archive/1/444012/100/0/threaded
http://www.securityfocus.com/bid/19631 Patch
http://www.vupen.com/english/advisories/2006/3333
https://exchange.xforce.ibmcloud.com/vulnerabilities/28489
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt Patch
http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html Patch
http://secunia.com/advisories/21558 PatchVendor Advisory
http://securityreason.com/securityalert/1455
http://www.securityfocus.com/archive/1/444012/100/0/threaded
http://www.securityfocus.com/bid/19631 Patch
http://www.vupen.com/english/advisories/2006/3333
https://exchange.xforce.ibmcloud.com/vulnerabilities/28489

Track CVE-2006-4370 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2003-0471WebAdmin WebAdmin.exe buffer overflow via long USER argumentWebAdmin.exe in Alt-N WebAdmin contains a buffer overflow reachable through an HTTP request to WebAdmin.dll with an overly long USER argument. A remo…EPSS 61%analysed4.6CVE-2006-4620Alt-n webadmin vulnerabilityThe useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain…EPSS 1.2%4.3CVE-2005-0317Alt-n webadmin vulnerabilityCross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HT…EPSS 1.2%4.3CVE-2005-0319Alt-n webadmin vulnerabilityDirect remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come …EPSS 1.2%4.0CVE-2006-4371Alt-n webadmin vulnerabilityMultiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authent…EPSS 2.7%3.5CVE-2003-1463Alt-n webadmin improper input validation vulnerabilityAbsolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1)…EPSS 2.0%2.1CVE-2005-0318Alt-n webadmin vulnerabilityuseredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users …EPSS 0.53%

Source: NIST National Vulnerability Database (record CVE-2006-4370), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.