Test ID:	1.3.6.1.4.1.25623.1.0.900405
Category:	Web application abuses
Title:	MDaemon Server WordClient Script Insertion Vulnerability
Summary:	MDaemon is prone to a script insertion vulnerability.
Description:	Summary: MDaemon is prone to a script insertion vulnerability. Vulnerability Insight: This vulnerability is due to an input validation error in 'HTML tags' in emails which are not properly filtered before displaying. This can be exploited when the malicious email is viewed. Vulnerability Impact: An attacker can execute malicious arbitrary code in the email body. Affected Software/OS: MDaemon Server version prior to 10.0.2. Solution: Update to version 10.0.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6967 BugTraq ID: 32355 http://www.securityfocus.com/bid/32355 http://osvdb.org/50011 http://secunia.com/advisories/32142 http://www.vupen.com/english/advisories/2008/3206 XForce ISS Database: worldclient-html-xss(46688) https://exchange.xforce.ibmcloud.com/vulnerabilities/46688
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.