Red Hat Security AdvisoryRHSA-2006:0668
squirrelmail security update
Released 2006-09-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 squirrelmail-1.4.8-2.el3
- Red Hat Enterprise Linux AS version 3 squirrelmail-1.4.8-2.el3
- Red Hat Enterprise Linux AS version 4 squirrelmail-1.4.8-2.el4
- Red Hat Enterprise Linux Desktop version 4 squirrelmail-1.4.8-2.el4
- Red Hat Enterprise Linux ES version 3 squirrelmail-1.4.8-2.el3
- Red Hat Enterprise Linux ES version 4 squirrelmail-1.4.8-2.el4
- Red Hat Enterprise Linux WS version 3 squirrelmail-1.4.8-2.el3
- Red Hat Enterprise Linux WS version 4 squirrelmail-1.4.8-2.el4
Fixes 1 record
Priority MEDIUM 41
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.09978 · Published 2006-08-11 · Fixed
