PT-2007-4891 · Squirrelmail · G/Pgp Plugin For Squirrelmail

Published 2007-07-10 · Updated 2008-11-15 · CVE-2007-3636

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions G/PGP (GPG) Plugin for Squirrelmail version 2.1

Description The issue involves multiple unspecified vulnerabilities that allow remote attackers to execute arbitrary commands. The exact vectors used for the attack are not specified.

Recommendations For G/PGP (GPG) Plugin for Squirrelmail version 2.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-3636

Affected Products

G/Pgp Plugin For Squirrelmail

References · 7

• 🔥 https://exploit-db.com/exploits/30283 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3636 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3636 · Note
• http://osvdb.org/45790 · Note
• http://lists.immunitysec.com/pipermail/dailydave/2007-July/004453.html · Note
• http://securityfocus.com/bid/24828 · Note
• http://attrition.org/pipermail/vim/2007-July/001703.html · Note