PT-2005-1253 · Squirrelmail · Squirrelmail

Grant Hollingworth · Published 2005-02-02 · Updated 2008-09-05 · CVE-2005-0152

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Squirrelmail version 1.2.6

Description The issue allows remote attackers to execute arbitrary code via URL manipulation.

Recommendations For Squirrelmail version 1.2.6, update to a version that fixes the remote file inclusion vulnerability.

Fix

Related Identifiers

CVE-2005-0152

DSA-662-1

Affected Products

Squirrelmail

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-0152 · Security Note
• http://debian.org/security/2005/dsa-662 · Vendor Advisory
• http://secunia.com/advisories/14096 · Vendor Advisory
• http://kb.cert.org/vuls/id/203214 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0152 · Note
• http://ftp.debian.org/debian/dists/stable-proposed-updates/squirrelmail_1.2.6-2_i386.changes · Note