TTG has reported a vulnerability in WebAdmin, which can be exploited by certain malicious users to disclose sensitive information and bypass certain security restrictions.

The vulnerability is cause due to the useredit_account.wdm module not properly protecting access to the details of the "MDaemon" account. This can be exploited to disclose the details of the account via a specially crafted URL.

This can further be exploited to gain access to the system queue by taking over the "MDaemon" account.

Successful exploitation requires the privileges of a domain administrator within the default domain of a MDaemon server.

The vulnerability has been reported in version 3.25. Prior versions may also be affected.

Solution
Update to version 3.26.

Provided and/or discovered by
TTG

Changelog
Further details available in Customer Area

Original Advisory
http://www.teklow.com/advisories/TTG0602.txt

Deep Links
Links available in Customer Area