PT-2006-1403 · Squirrelmail · Squirrelmail

Rod Hedor · Publicado 2006-01-21 · Atualizado 2018-10-19 · CVE-2006-0331

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SquirrelMail plugin chpasswd version 3.1

Description A buffer overflow issue in the Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.

Recommendations For SquirrelMail plugin chpasswd version 3.1, update to a version that fixes this issue to prevent arbitrary code execution.

Exploit

Correção

Identificadores relacionados

CVE-2006-0331

Produtos afetados

Squirrelmail

Referências · 6

• 🔥 https://exploit-db.com/exploits/1449 · Exploit
• http://squirrelmail.org/plugin_view.php?id=117 · Nota
• http://securityfocus.com/archive/1/422414/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24258 · Nota
• http://securityreason.com/securityalert/363 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0331 · Nota de Segurança