CVE-2006-5968

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-17 · updated 2026-06-16

Description

MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions.

Affected products

Alt-N Mdaemon: 9.0.5, 9.0.6, 9.51, 9.53

References

http://secunia.com/advisories/21554
http://secunia.com/secunia_research/2006-67/advisory/
http://securityreason.com/securityalert/1890
http://securitytracker.com/id?1017238
http://www.securityfocus.com/archive/1/451821/100/100/threaded
http://www.vupen.com/english/advisories/2006/4538
https://exchange.xforce.ibmcloud.com/vulnerabilities/30331
http://secunia.com/advisories/21554
http://secunia.com/secunia_research/2006-67/advisory/
http://securityreason.com/securityalert/1890
http://securitytracker.com/id?1017238
http://www.securityfocus.com/archive/1/451821/100/100/threaded

Get alerted when CVE-2006-5968 or the next vulnerability affects your stack