CVE-2007-3635

2007-07-1000:30:00

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.158

Percentile

96.1%

JSON

Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow “local authenticated users” to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634.

Affected configurations

Nvd

Node

squirrelmailgpg_pluginMatch2.0

squirrelmailsquirrelmailMatch1.4.10a

VendorProductVersionCPE
squirrelmailgpg_plugin2.0cpe:2.3:a:squirrelmail:gpg_plugin:2.0:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.4.10acpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
squirrelmail	gpg_plugin	2.0	cpe:2.3:a:squirrelmail:gpg_plugin:2.0:::::::*
squirrelmail	squirrelmail	1.4.10a	cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:::::::*