← Vulnerability feed

Vulnerability record · CVE-2006-4620 · published 7 September 2006

CVE-2006-4620: Alt-n webadmin vulnerability

AAlt N · Webadmin

The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox of another account.

4.6 CVSS 2.0 Medium EPSS 1.2% · top 33.2%
4.6CVSS 2.0 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox of another account.

AV:N/AC:H/Au:S/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt Patch
http://secunia.com/advisories/21727 PatchVendor Advisory
http://securityreason.com/securityalert/1516
http://www.osvdb.org/28548
http://www.securityfocus.com/archive/1/445153/100/0/threaded
http://www.teklow.com/advisories/TTG0602.txt PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28776
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt Patch
http://secunia.com/advisories/21727 PatchVendor Advisory
http://securityreason.com/securityalert/1516
http://www.osvdb.org/28548
http://www.securityfocus.com/archive/1/445153/100/0/threaded
http://www.teklow.com/advisories/TTG0602.txt PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28776

Track CVE-2006-4620 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-4370Alt-n webadmin vulnerabilityAlt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global …EPSS 1.8%7.5CVE-2003-0471WebAdmin WebAdmin.exe buffer overflow via long USER argumentWebAdmin.exe in Alt-N WebAdmin contains a buffer overflow reachable through an HTTP request to WebAdmin.dll with an overly long USER argument. A remo…EPSS 61%analysed4.3CVE-2005-0317Alt-n webadmin vulnerabilityCross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HT…EPSS 1.2%4.3CVE-2005-0319Alt-n webadmin vulnerabilityDirect remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come …EPSS 1.2%4.0CVE-2006-4371Alt-n webadmin vulnerabilityMultiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authent…EPSS 2.7%3.5CVE-2003-1463Alt-n webadmin improper input validation vulnerabilityAbsolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1)…EPSS 2.0%2.1CVE-2005-0318Alt-n webadmin vulnerabilityuseredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users …EPSS 0.53%

Source: NIST National Vulnerability Database (record CVE-2006-4620), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.