PT-2006-1403 · Squirrelmail · Squirrelmail

Rod Hedor · Published 2006-01-21 · Updated 2018-10-19 · CVE-2006-0331

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SquirrelMail plugin chpasswd version 3.1

Description A buffer overflow issue in the Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.

Recommendations For SquirrelMail plugin chpasswd version 3.1, update to a version that fixes this issue to prevent arbitrary code execution.

Exploit

Fix

Related Identifiers

CVE-2006-0331

Affected Products

Squirrelmail

References · 6

• 🔥 https://exploit-db.com/exploits/1449 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0331 · Security Note
• http://squirrelmail.org/plugin_view.php?id=117 · Note
• http://securityfocus.com/archive/1/422414/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24258 · Note
• http://securityreason.com/securityalert/363 · Note