Fedora Update for squirrelmail FEDORA-2008-10740

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Security Advisory CESA-2009:0010 (squirrelmail)

The remote host is missing updates to squirrelmail announced in advisory CESA-2009:0010. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

squirrelmail security update

1.4.8-5.0.1.el52.2 - Remove Redhat splash screen images 1.4.8-5.2 - Resolves: CVE-2008-2379 - fix XSS issue caused by an insufficient html mail sanitation 1.4.8-5.1 - don't transmit cookies under non-SSL connections if the session is started under an SSL https connection - Resolves: CVE-2008-3663...

openSUSE 10 Security Update : squirrelmail (squirrelmail-5860)

This update brings squirrelmail to version 1.4.10a, fixing a previous regression in cookie handling novell bug 446400 and a XSS problem CVE-2008-2379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

FreeBSD Ports: squirrelmail

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-2379

Cross-site scripting XSS vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message...

CVE-2008-2379

Cross-site scripting XSS vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message...

SquirrelMail畸形邮件消息HTML注入漏洞

BUGTRAQ ID: 32603 CVECAN ID: CVE-2008-2379 SquirrelMail是一个多功能的用PHP4实现的Webmail程序，可运行于Linux/Unix类操作系统下。 SquirrelMail没有正确地过滤邮件消息的中的HTML部分输入便显示给了用户。如果打开了恶意的邮件消息的话，就可能导致在用户浏览器会话中执行任意代码。成功攻击要求Options - Display Preferences中启用了Show HTML Version by Default选项。 SquirrelMail 1.4.16 SquirrelMail ------------...

CVE-2008-2379

CVE-2008-2379 is a cross-site scripting (XSS) vulnerability in SquirrelMail prior to 1.4.17, triggered by a crafted hyperlink in an HTML email part. The underlying issue is insufficient sanitization of HTML mail, allowing remote attackers to inject script/HTML in a user session. Related advisorie...

CVE-2007-2379

CVE-2007-2379 affects the jQuery framework, where data is exchanged as JSON without an associated protection scheme. This enables JavaScript Hijacking: a remote attacker can obtain data by a page that retrieves it through a URL in the SRC attribute of a SCRIPT element and reads it with other Java...

CVE-2006-2379

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing...

CVE-2006-2379

CVE-2006-2379 describes a buffer overflow in the Windows TCP/IP Protocol driver related to IP source routing. Affected products include Windows 2000 SP4, XP SP1/SP2, and Server 2003 SP1 and earlier. The root cause is an unchecked buffer length when processing IP source routing packets, potentiall...

MS06-032: Vulnerability in TCP/IP Could Allow Remote Code Execution (917953)

The remote version of Windows contains a version of the TCP/IP protocol that is vulnerable to a buffer overflow attack. An attacker may exploit these flaws to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21694; scriptversion"1.33";...

CVE-2004-2379

@Mail 3.64 for Windows contains XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl. Affected component/functionality: util.pl (Displayed Name) and showmail.pl (Folder). ...

CVE-2004-2379

Multiple cross-site scripting XSS vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via 1 the Displayed Name attribute in util.pl and 2 the Folder attribute in showmail.pl...

CVE-2002-2379

Cisco AS5350 IOS 12.211T with access control lists ACLs applied and possibly with ssh running allows remote attackers to cause a denial of service crash via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor...