CVE-2005-4266: Alt-N MDaemon

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value.

Affected products

• Alt-N MDaemon: version 8.1.3 only
• Alt-N Worldclient: version 8.1.3 only

Published 2005-12-15. Last modified 2026-06-16.