CVE-2006-4364: Alt-N MDaemon

Medium severity, CVSS 5.0. EPSS: 57.3% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands.

Affected products

• Alt-N MDaemon: version 2.8 only; version 2.8.5.0 only; version 2.71_sp1 only; version 3.0.3 only; version 3.0.4 only; version 3.1.1 only; …

Published 2006-08-27. Last modified 2026-06-16.