
CVE-2006-4364 – Alt-N MDaemon POP3 Server < 9.06 - 'USER' Remote Heap Overflow
https://notcve.org/view.php?id=CVE-2006-4364
25 Aug 2006 — Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands. Múltiples desbordamientos de búfer en el servidor POP3 de Alt-N Technologies MDaemon anterior a 9.0.6 permiten a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente ejecutar código de su el... • https://www.exploit-db.com/exploits/2258 •

CVE-2006-2646 – Alt-N MDaemon 2-8 - IMAP Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2006-2646
30 May 2006 — Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a long A0001 argument that begins with a '"' (double quote). Desbordamiento de búfer en Alt-N MDaemon, posiblemente 9.0.1 y versiones anteriores, permite a atacantes remotos ejecutar código arbitrario a través de un argumento A0001 largo que comienza con un '"' (comillas dobles). • https://www.exploit-db.com/exploits/27914 •

CVE-2004-2292
https://notcve.org/view.php?id=CVE-2004-2292
31 Dec 2004 — Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to the IMAP server. • http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0527.html •

CVE-2003-1471
https://notcve.org/view.php?id=CVE-2003-1471
31 Dec 2003 — MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number. • http://archive.cert.uni-stuttgart.de/bugtraq/2003/04/msg00364.html • CWE-20: Improper Input Validation •

CVE-2000-0399
https://notcve.org/view.php?id=CVE-2000-0399
24 May 2000 — Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name. • http://archives.neohapsis.com/archives/bugtraq/2000-05/0301.html •