PT-2006-3760 · Squirrelmail+1 · Squirrelmail+1

Published 2006-06-06 · Updated 2024-08-07 · CVE-2006-2842

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SquirrelMail versions 1.4.6 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter, under specific conditions where register globals is enabled and magic quotes gpc is disabled. There have been disputes regarding the validity of this issue, with some arguing that SquirrelMail provides sufficient warnings to administrators when register globals is enabled. However, the original developer has posted a security advisory, indicating potential real-world applicability.

Recommendations For SquirrelMail versions 1.4.6 and earlier, consider disabling the register globals setting to prevent exploitation, and ensure magic quotes gpc is enabled to add an extra layer of protection. As a temporary workaround, restrict access to the functions/plugin.php file until a more permanent solution is applied.

Exploit

Fix

Related Identifiers

CVE-2006-2842

RHSA-2006:0547

RHSA-2006_0547

Affected Products

Red Hat

Squirrelmail

References · 26

• 🔥 https://github.com/karthi-the-hacker/CVE-2006-2842 · Exploit
• 🔥 https://exploit-db.com/exploits/27948 · Exploit
• 🔥 http://securityfocus.com/bid/18231 · Exploit
• http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html · Vendor Advisory
• http://squirrelmail.cvs.sourceforge.net/squirrelmail/squirrelmail/functions/global.php?r1=1.27.2.16&r2=1.27.2.17&view=patch&pathrev=SM-1_4-STABLE · Patch
• http://redhat.com/support/errata/RHSA-2006-0547.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2842 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:101 · Vendor Advisory
• http://squirrelmail.org/security/issue/2006-06-01 · Patch
• http://secunia.com/advisories/20406 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_17_sr.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2006-2842 · Note
• http://securitytracker.com/id?1016209 · Note
• https://access.redhat.com/errata/RHSA-2006:0547 · Note