Fedora Core 10 FEDORA-2009-8797 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-8797. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 9 FEDORA-2009-5471 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-5471. OpenVAS Vulnerability Test $Id: fcore20095471.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5471 squirrelmail Authors: Thomas Reinke Copyright: Copyright...

CentOS Security Advisory CESA-2009:1066 (squirrelmail)

The remote host is missing updates to squirrelmail announced in advisory CESA-2009:1066. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora Core 10 FEDORA-2009-5350 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-5350. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 9 FEDORA-2009-5471 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-5471. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora 10 : squirrelmail-1.4.19-1.fc10 (2009-5350)

Fri May 22 2009 Michal Hlavinka - 1.4.19-1 - updated to 1.4.19 - fixes CVE-2009-1579, CVE-2009-1580, CVE-2009-1581 - Tue May 19 2009 Michal Hlavinka - 1.4.18-2 - fix undefined variable aSpamIds 501260 - Tue May 12 2009 Michal Hlavinka - 1.4.18-1 - updated to 1.4.18 - Wed Mar 18 2009 Michal...

squirrelmail security update

1.4.8-5.0.1.el53.7 - Remove Redhat splash screen images 1.4.8-5.7 - fix broken patch for CVE-2009-1579 1.4.8-5.6 - fix broken patch for CVE-2009-1579 1.4.8-5.5 - don't ship patch backup files 1.4.8-5.4 - fix: CVE-2009-1581 : CSS positioning vulnerability - fix: CVE-2009-1579 : Server-side code...

Fedora 9 : squirrelmail-1.4.19-1.fc9 (2009-5471)

Fri May 22 2009 Michal Hlavinka - 1.4.19-1 - updated to 1.4.19 - fixes CVE-2009-1579, CVE-2009-1580, CVE-2009-1581 - Tue May 19 2009 Michal Hlavinka - 1.4.18-2 - fix undefined variable aSpamIds 501260 - Tue May 12 2009 Michal Hlavinka - 1.4.18-1 - update to 1.4.18 fixes CVE-2009-1581 - Thu Dec 4...

Mandrake Security Advisory MDVSA-2009:122 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory MDVSA-2009:122. OpenVAS Vulnerability Test $Id: mdksa2009122.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:122 squirrelmail Authors: Thomas Reinke Copyright: Copyright c 20...

Debian: Security Advisory (DSA-1802-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOT...

[SECURITY] [DSA 1802-2] New squirrelmail packages correct incomplete fix

------------------------------------------------------------------------ Debian Security Advisory DSA-1802-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 21, 2009 http://www.debian.org/security/faq -...

Fedora Core 9 FEDORA-2009-4870 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4870. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-4880 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4880. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-4880 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4880. OpenVAS Vulnerability Test $Id: fcore20094880.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4880 squirrelmail Authors: Thomas Reinke Copyright: Copyright...

Fedora Core 11 FEDORA-2009-4875 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4875. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

SquirrelMail map_yp_alias Username Mapping Alias Arbitrary Code Execution

The installed version of SquirrelMail fails to properly sanitize input to the '$username' variable in the 'mapypalias' function in 'functions/imapgeneral.php'. An unauthenticated, remote attacker can exploit this to execute arbitrary code subject to the privileges of the affected web-server. Note...

CVE-2009-1579

CVE-2009-1579 affects SquirrelMail before 1.4.18 and NaSMail before 1.7. The flaw is in map_yp_alias within functions/imap_general.php, where a username string used by the ypmatch program can be crafted with shell metacharacters to execute arbitrary commands on the server. Public sources show mul...

openSUSE 10 Security Update : squirrelmail (squirrelmail-6242)

Multiple vulnerabilities have been fixed in SquirrelMail: an XSS and input sanitization bug both CVE-2009-1578, a server-side code execution CVE-2009-1579, a login session hijacking bug CVE-2009-1580 and another bug that allowed phishing and XSS attacks CVE-2009-1581. %NASLMINLEVEL 70300 C Tenabl...

Fedora 11 : squirrelmail-1.4.18-1.fc11 (2009-4875)

Tue May 12 2009 Michal Hlavinka - 1.4.18-1 - updated to 1.4.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...