Red Hat Security AdvisoryRHSA-2009:1490
squirrelmail security update
Released 2009-10-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 squirrelmail-1.4.8-16.el3
- Red Hat Enterprise Linux (v. 5 server) squirrelmail-1.4.8-5.el5_4.10
- Red Hat Enterprise Linux AS version 3 squirrelmail-1.4.8-16.el3
- Red Hat Enterprise Linux AS version 4 squirrelmail-1.4.8-5.el4_8.8
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) squirrelmail-1.4.8-5.el5_4.10
- Red Hat Enterprise Linux Desktop version 4 squirrelmail-1.4.8-5.el4_8.8
- Red Hat Enterprise Linux ES version 3 squirrelmail-1.4.8-16.el3
- Red Hat Enterprise Linux ES version 4 squirrelmail-1.4.8-5.el4_8.8
- Red Hat Enterprise Linux WS version 3 squirrelmail-1.4.8-16.el3
- Red Hat Enterprise Linux WS version 4 squirrelmail-1.4.8-5.el4_8.8
Fixes 1 record
Priority LOW 33
Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01517 · Published 2009-08-25 · Fixed CWE-352
