Vulnerability record · CVE-2006-4371 · published 26 August 2006

CVE-2006-4371: Alt-n webadmin vulnerability

AAlt N · Webadmin

Multiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated global administrators to read arbitrary files via a .. (dot dot) in the file parameter to (1) logfile_view.wdm and (2) configfile_view.wdm.

4.0 CVSS 2.0 Medium EPSS 2.7% · top 14.9%

4.0CVSS 2.0 base score

2.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

20References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

AWebadmin Alt N

References

Link	Tags
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt	Patch
http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html	Patch
http://secunia.com/advisories/21558	PatchVendor Advisory
http://securityreason.com/securityalert/1455
http://www.osvdb.org/28122
http://www.osvdb.org/28123
http://www.securityfocus.com/archive/1/444012/100/0/threaded
http://www.securityfocus.com/bid/19620	Patch
http://www.vupen.com/english/advisories/2006/3333
https://exchange.xforce.ibmcloud.com/vulnerabilities/28488
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt	Patch
http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048959.html	Patch
http://secunia.com/advisories/21558	PatchVendor Advisory
http://securityreason.com/securityalert/1455
http://www.osvdb.org/28122
http://www.osvdb.org/28123
http://www.securityfocus.com/archive/1/444012/100/0/threaded
http://www.securityfocus.com/bid/19620	Patch
http://www.vupen.com/english/advisories/2006/3333
https://exchange.xforce.ibmcloud.com/vulnerabilities/28488

Track CVE-2006-4371 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-4370Alt-n webadmin vulnerabilityAlt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global …EPSS 1.8%26 Aug 2006 7.5CVE-2003-0471WebAdmin WebAdmin.exe buffer overflow via long USER argumentWebAdmin.exe in Alt-N WebAdmin contains a buffer overflow reachable through an HTTP request to WebAdmin.dll with an overly long USER argument. A remo…EPSS 61%analysed7 Aug 2003 4.6CVE-2006-4620Alt-n webadmin vulnerabilityThe useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain…EPSS 1.2%7 Sep 2006 4.3CVE-2005-0317Alt-n webadmin vulnerabilityCross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HT…EPSS 1.2%28 Jan 2005 4.3CVE-2005-0319Alt-n webadmin vulnerabilityDirect remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come …EPSS 1.2%28 Jan 2005 3.5CVE-2003-1463Alt-n webadmin improper input validation vulnerabilityAbsolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1)…EPSS 2.0%31 Dec 2003 2.1CVE-2005-0318Alt-n webadmin vulnerabilityuseredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users …EPSS 0.53%28 Jan 2005

Source: NIST National Vulnerability Database (record CVE-2006-4371), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.