CVE-2008-2631

MDaemon < 9.6.5 - Denial of Service via Crafted HTTP POST Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-2631. PoCs published by securfrog.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in MDaemon's WorldClient.dll via a malformed POST request. It sends a crafted payload to the 'ComposeUser' parameter, potentially allowing remote code execution on the server.

Description

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by securfrog · perldoswindows
https://www.exploit-db.com/exploits/5727

This exploit targets a buffer overflow vulnerability in MDaemon's WorldClient.dll via a malformed POST request. It sends a crafted payload to the 'ComposeUser' parameter, potentially allowing remote code execution on the server.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: MDaemon < v9.6.5
No auth needed
Prerequisites: Network access to the target server · MDaemon WorldClient service running on port 3000
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30474
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42809

Scores

EPSS 0.2279
EPSS Percentile 97.4%

Details

CWE
CWE-399
Status published
Products (1)
altn/mdaemon < 9.6.5
Published Jun 10, 2008
Tracked Since Feb 18, 2026