Red Hat Security AdvisoryRHSA-2006:0547
squirrelmail security update
Released 2006-07-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 squirrelmail-1.4.6-7.el3
- Red Hat Enterprise Linux AS version 3 squirrelmail-1.4.6-7.el3
- Red Hat Enterprise Linux AS version 4 squirrelmail-1.4.6-7.el4
- Red Hat Enterprise Linux Desktop version 4 squirrelmail-1.4.6-7.el4
- Red Hat Enterprise Linux ES version 3 squirrelmail-1.4.6-7.el3
- Red Hat Enterprise Linux ES version 4 squirrelmail-1.4.6-7.el4
- Red Hat Enterprise Linux WS version 3 squirrelmail-1.4.6-7.el3
- Red Hat Enterprise Linux WS version 4 squirrelmail-1.4.6-7.el4
Fixes 1 record
Priority MEDIUM 63
PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code vi…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.47196 · Published 2006-06-06 · Fixed