PT-2005-1253 · Squirrelmail · Squirrelmail

Grant Hollingworth · Publicado 2005-02-02 · Atualizado 2008-09-05 · CVE-2005-0152

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Squirrelmail version 1.2.6

Description The issue allows remote attackers to execute arbitrary code via URL manipulation.

Recommendations For Squirrelmail version 1.2.6, update to a version that fixes the remote file inclusion vulnerability.

Correção

Identificadores relacionados

CVE-2005-0152

DSA-662-1

Produtos afetados

Squirrelmail

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-0152 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0152 · Nota
• http://debian.org/security/2005/dsa-662 · Aviso do Fabricante
• http://ftp.debian.org/debian/dists/stable-proposed-updates/squirrelmail_1.2.6-2_i386.changes · Nota
• http://secunia.com/advisories/14096 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/203214 · Correção