CVE-2006-5968 — MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions

Back Back to CVE browser

MEDIUM

MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions

Published Nov 17, 2006

4.6

MEDIUM

CVSS 2.0

EPSS 0.40%

Description

MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.40% 0.00396

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00396

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.40% (0.00396)	31.47th	v5 (v2026.06.15)
Jun 15, 2026	0.39% (0.00393)	30.84th	v5 (v2026.06.15)
Mar 17, 2025	0.08% (0.00084)	22.01th	v4 (v2025.03.14)
Dec 12, 2024	0.06% (0.00060)	27.52th	v3 (v2023.03.01)
Apr 11, 2024	0.06% (0.00060)	24.18th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	1.75% (0.01755)	76.27th	v2 (v2022.01.01)
Feb 23, 2023	1.75% (0.01755)	76.22th	v2 (v2022.01.01)
Apr 1, 2022	1.75% (0.01755)	74.16th	v2 (v2022.01.01)
Feb 4, 2022	1.75% (0.01755)	53.42th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/21554
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/secunia_research/2006-67/advisory/
x_refsource_MISCVendor Advisory
http://securityreason.com/securityalert/1890
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1017238
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/451821/100/100/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2006/4538
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30331
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/21554		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/secunia_research/2006-67/advisory/		x_refsource_MISCVendor Advisory
http://securityreason.com/securityalert/1890		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1017238		vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/451821/100/100/threaded		mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2006/4538		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30331		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner flexera

Published Nov 17, 2006

Updated Aug 7, 2024

Reserved Nov 17, 2006

Link CVE-2006-5968

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-5968

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-5968