CVE-2008-6967 [Medium] | XSS in Mdaemon

Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2025-03-30	0.45%	0.54%	+0.09%
2	2025-03-29	0.54%	0.45%	-0.09%
3	2025-03-17	—	0.54%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2025-03-30

0.45%

0.54%

+0.09%

2025-03-29

0.54%

0.45%

-0.09%

2025-03-17

—

0.54%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
5.0	2.0	MEDIUM	`AV:N/AC:L/Au:N/C:N/I:P/A:N` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:N) No confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:N) No availability impact.	10.0	2.9	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

5.0

2.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:N): No confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:N): No availability impact.

10.0

2.9

[email protected]

Affected software / configurations for CVE-2008-6967

Vendor	Product	Version	Raw CPE
alt-n	mdaemon	<= 10.0.1	cpe:2.3:a:alt-n:mdaemon::::::::
alt-n	mdaemon	2.8	cpe:2.3:a:alt-n:mdaemon:2.8:::::::*
alt-n	mdaemon	2.8.5.0	cpe:2.3:a:alt-n:mdaemon:2.8.5.0:::::::*
alt-n	mdaemon	2.71_sp1	cpe:2.3:a:alt-n:mdaemon:2.71_sp1:::::::*
alt-n	mdaemon	3.0.3	cpe:2.3:a:alt-n:mdaemon:3.0.3:::::::*
alt-n	mdaemon	3.0.4	cpe:2.3:a:alt-n:mdaemon:3.0.4:::::::*
alt-n	mdaemon	3.1.1	cpe:2.3:a:alt-n:mdaemon:3.1.1:::::::*
alt-n	mdaemon	3.1.2	cpe:2.3:a:alt-n:mdaemon:3.1.2:::::::*
alt-n	mdaemon	3.1_beta	cpe:2.3:a:alt-n:mdaemon:3.1_beta:::::::*
alt-n	mdaemon	3.5.0	cpe:2.3:a:alt-n:mdaemon:3.5.0:::::::*
alt-n	mdaemon	3.5.1	cpe:2.3:a:alt-n:mdaemon:3.5.1:::::::*
alt-n	mdaemon	3.5.4	cpe:2.3:a:alt-n:mdaemon:3.5.4:::::::*
alt-n	mdaemon	3.5.4	cpe:2.3:a:alt-n:mdaemon:3.5.4::pro:::::
alt-n	mdaemon	3.5.4	cpe:2.3:a:alt-n:mdaemon:3.5.4::standard:::::
alt-n	mdaemon	3.5.6	cpe:2.3:a:alt-n:mdaemon:3.5.6:::::::*
alt-n	mdaemon	5.0	cpe:2.3:a:alt-n:mdaemon:5.0:::::::*
alt-n	mdaemon	5.0	cpe:2.3:a:alt-n:mdaemon:5.0::pro:::::
alt-n	mdaemon	5.0.1	cpe:2.3:a:alt-n:mdaemon:5.0.1:::::::*
alt-n	mdaemon	5.0.2	cpe:2.3:a:alt-n:mdaemon:5.0.2:::::::*
alt-n	mdaemon	5.0.3	cpe:2.3:a:alt-n:mdaemon:5.0.3:::::::*
alt-n	mdaemon	5.0.4	cpe:2.3:a:alt-n:mdaemon:5.0.4:::::::*
alt-n	mdaemon	5.0.5	cpe:2.3:a:alt-n:mdaemon:5.0.5:::::::*
alt-n	mdaemon	5.0.6	cpe:2.3:a:alt-n:mdaemon:5.0.6:::::::*
alt-n	mdaemon	5.0.7	cpe:2.3:a:alt-n:mdaemon:5.0.7:::::::*
alt-n	mdaemon	6.0	cpe:2.3:a:alt-n:mdaemon:6.0:::::::*
alt-n	mdaemon	6.0.5	cpe:2.3:a:alt-n:mdaemon:6.0.5:::::::*
alt-n	mdaemon	6.0.6	cpe:2.3:a:alt-n:mdaemon:6.0.6:::::::*
alt-n	mdaemon	6.0.7	cpe:2.3:a:alt-n:mdaemon:6.0.7:::::::*
alt-n	mdaemon	6.5.0	cpe:2.3:a:alt-n:mdaemon:6.5.0:::::::*
alt-n	mdaemon	6.8.3	cpe:2.3:a:alt-n:mdaemon:6.8.3:::::::*
alt-n	mdaemon	6.8.4	cpe:2.3:a:alt-n:mdaemon:6.8.4:::::::*
alt-n	mdaemon	6.8.5	cpe:2.3:a:alt-n:mdaemon:6.8.5:::::::*
alt-n	mdaemon	7.2	cpe:2.3:a:alt-n:mdaemon:7.2:::::::*
alt-n	mdaemon	8.1.1	cpe:2.3:a:alt-n:mdaemon:8.1.1:::::::*
alt-n	mdaemon	8.1.3	cpe:2.3:a:alt-n:mdaemon:8.1.3:::::::*
alt-n	mdaemon	8.1.4	cpe:2.3:a:alt-n:mdaemon:8.1.4:::::::*
alt-n	mdaemon	9.0.1	cpe:2.3:a:alt-n:mdaemon:9.0.1:::::::*
alt-n	mdaemon	9.0.2	cpe:2.3:a:alt-n:mdaemon:9.0.2:::::::*
alt-n	mdaemon	9.0.3	cpe:2.3:a:alt-n:mdaemon:9.0.3:::::::*
alt-n	mdaemon	9.0.4	cpe:2.3:a:alt-n:mdaemon:9.0.4:::::::*
alt-n	mdaemon	9.0.5	cpe:2.3:a:alt-n:mdaemon:9.0.5:::::::*
alt-n	mdaemon	9.0.6	cpe:2.3:a:alt-n:mdaemon:9.0.6:::::::*
alt-n	mdaemon	9.6.4	cpe:2.3:a:alt-n:mdaemon:9.6.4:::::::*
alt-n	mdaemon	9.6.5	cpe:2.3:a:alt-n:mdaemon:9.6.5:::::::*
alt-n	mdaemon	9.50	cpe:2.3:a:alt-n:mdaemon:9.50:::::::*
alt-n	mdaemon	9.51	cpe:2.3:a:alt-n:mdaemon:9.51:::::::*
alt-n	mdaemon	9.53	cpe:2.3:a:alt-n:mdaemon:9.53:::::::*
alt-n	mdaemon	9.60	cpe:2.3:a:alt-n:mdaemon:9.60:::::::*
alt-n	mdaemon	9.64	cpe:2.3:a:alt-n:mdaemon:9.64:::::::*
alt-n	worldclient	<= 10.0.1	cpe:2.3:a:alt-n:worldclient::::::::
alt-n	worldclient	2.1	cpe:2.3:a:alt-n:worldclient:2.1:::::::*
alt-n	worldclient	2.1	cpe:2.3:a:alt-n:worldclient:2.1::standard:::::
alt-n	worldclient	5.0	cpe:2.3:a:alt-n:worldclient:5.0:::::::*
alt-n	worldclient	5.0	cpe:2.3:a:alt-n:worldclient:5.0::pro:::::
alt-n	worldclient	5.0.1	cpe:2.3:a:alt-n:worldclient:5.0.1:::::::*
alt-n	worldclient	5.0.2	cpe:2.3:a:alt-n:worldclient:5.0.2:::::::*
alt-n	worldclient	5.0.3	cpe:2.3:a:alt-n:worldclient:5.0.3:::::::*
alt-n	worldclient	5.0.4	cpe:2.3:a:alt-n:worldclient:5.0.4:::::::*
alt-n	worldclient	5.0.5	cpe:2.3:a:alt-n:worldclient:5.0.5:::::::*
alt-n	worldclient	8.1.3	cpe:2.3:a:alt-n:worldclient:8.1.3:::::::*

References for CVE-2008-6967

URL	Tags
http://files.altn.com/MDaemon/Release/RelNotes_en.txt	Patch
http://osvdb.org/50011
http://secunia.com/advisories/32142	Vendor Advisory
http://www.securityfocus.com/bid/32355
http://www.vupen.com/english/advisories/2008/3206	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46688

URL

CVE-2008-6967

Exploit prediction scoring system (EPSS) score for CVE-2008-6967

Common vulnerability scoring system (CVSS) metrics for CVE-2008-6967

Weakness enumeration for CVE-2008-6967

Affected software / configurations for CVE-2008-6967

References for CVE-2008-6967