Red Hat Security Advisory

RHSA-2013:0126

squirrelmail security and bug fix update

Released 2013-01-08 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) squirrelmail-1.4.8-21.el5
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) squirrelmail-1.4.8-21.el5

Fixes 1 record

TI-2012-01897 CVE-2012-2124 · GHSA-xrcw-cgg9-mj7c

functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4…

LOW 28

functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk con…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02451 Published 2013-01-18 Partial fix CWE-399