Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global administrator's password and gain privileges via the userlist.wdm file.
| Software | From | Fixed in |
|---|---|---|
| alt-n / webadmin | 3.2.4 | 3.2.4.x |
| alt-n / webadmin | 3.2.3 | 3.2.3.x |