CVE-2009-1381

The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOT...

CVE-2009-1381

The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOT...

Code injection

The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOT...

CVE-2009-1381

The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. NOT...

CVE-2009-1381

CVE-2009-1381 relates to SquirrelMail prior to version 1.4.19-1 on Debian and possibly other OSes, where the map_yp_alias function in functions/imap_general.php allows remote execution of arbitrary commands via shell metacharacters in a username string used by ypmatch. Connected advisories confir...

PT-2009-3900 · Squirrelmail · Squirrelmail

Name of the Vulnerable Software and Affected Versions: SquirrelMail versions prior to 1.4.19-1 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. This is due to an incomplete fix for a...

[SECURITY] [DSA 1802-2] New squirrelmail packages correct incomplete fix

------------------------------------------------------------------------ Debian Security Advisory DSA-1802-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 21, 2009 http://www.debian.org/security/faq -...

DSA-1802-2 squirrelmail - incomplete fix

Bulletin has no description...

Fedora Core 10 FEDORA-2009-4880 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4880. OpenVAS Vulnerability Test $Id: fcore20094880.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4880 squirrelmail Authors: Thomas Reinke Copyright: Copyright...

Fedora Core 9 FEDORA-2009-4870 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4870. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 11 FEDORA-2009-4875 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4875. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-4880 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4880. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Mandrake Security Advisory MDVSA-2009:110 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory MDVSA-2009:110. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora Core 9 FEDORA-2009-4870 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4870. OpenVAS Vulnerability Test $Id: fcore20094870.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4870 squirrelmail Authors: Thomas Reinke Copyright: Copyright...

Mandrake Security Advisory MDVSA-2009:110 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory MDVSA-2009:110. OpenVAS Vulnerability Test $Id: mdksa2009110.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:110 squirrelmail Authors: Thomas Reinke Copyright: Copyright c 20...

Fedora Core 11 FEDORA-2009-4875 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4875. OpenVAS Vulnerability Test $Id: fcore20094875.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4875 squirrelmail Authors: Thomas Reinke Copyright: Copyright...

Debian DSA-1802-2 : squirrelmail - several vulnerabilities

Several remote vulnerabilities have been discovered in SquirrelMail, a webmail application. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1578 Cross site scripting was possible through a number of pages which allowed an attacker to steal sensitive...

[SECURITY] [DSA 1802-1] New squirrelmail packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1802-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 19, 2009 http://www.debian.org/security/faq -...

DSA-1802-1 squirrelmail - several vulnerabilities

Bulletin has no description...

SquirrelMail map_yp_alias Username Mapping Alias Arbitrary Code Execution

The installed version of SquirrelMail fails to properly sanitize input to the '$username' variable in the 'mapypalias' function in 'functions/imapgeneral.php'. An unauthenticated, remote attacker can exploit this to execute arbitrary code subject to the privileges of the affected web-server. Note...