CVE-2006-4620

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-07 · updated 2026-06-16

Description

The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox of another account.

Affected products

Alt-N Webadmin: through 3.2.5; 3.0.2, 3.0.3, 3.2.3, 3.2.4

References

http://files.altn.com/WebAdmin/Release/RelNotes_en.txt
http://secunia.com/advisories/21727
http://securityreason.com/securityalert/1516
http://www.osvdb.org/28548
http://www.securityfocus.com/archive/1/445153/100/0/threaded
http://www.teklow.com/advisories/TTG0602.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/28776
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt
http://secunia.com/advisories/21727
http://securityreason.com/securityalert/1516
http://www.osvdb.org/28548
http://www.securityfocus.com/archive/1/445153/100/0/threaded

Get alerted when CVE-2006-4620 or the next vulnerability affects your stack