squirrelmail: XSS issue caused by an insufficient html mail sanitation

Cross-site scripting XSS vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message...

squirrelmail security update

1.4.8-5.0.1.el52.2 - Remove Redhat splash screen images 1.4.8-5.2 - Resolves: CVE-2008-2379 - fix XSS issue caused by an insufficient html mail sanitation 1.4.8-5.1 - don't transmit cookies under non-SSL connections if the session is started under an SSL https connection - Resolves: CVE-2008-3663...

openSUSE 10 Security Update : squirrelmail (squirrelmail-5860)

This update brings squirrelmail to version 1.4.10a, fixing a previous regression in cookie handling novell bug 446400 and a XSS problem CVE-2008-2379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Debian DSA-1682-1 : squirrelmail - insufficient input sanitising

Ivan Markovic discovered that SquirrelMail, a webmail application, did not sufficiently sanitise incoming HTML email, allowing an attacker to perform cross site scripting through sending a malicious HTML email. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian: Security Advisory (DSA-1682-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: squirrelmail

The remote host is missing an update to the system as announced in the referenced advisory. VID d1ce8a4f-c235-11dd-8cbc-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID d1ce8a4f-c235-11dd-8cbc-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: squirrelmail

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 1682-1 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory DSA 1682-1. OpenVAS Vulnerability Test $Id: deb16821.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1682-1 squirrelmail Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Fedora 9 : squirrelmail-1.4.17-1.fc9 (2008-10740)

update to 1.4.17 fixes XSS issue caused by an insufficient html mail sanitation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] [DSA 1682-1] New squirrelmail packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-168201 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 07, 2008 http://www.debian.org/security/faq -...

[SECURITY] Fedora 8 Update: squirrelmail-1.4.17-1.fc8

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

[SECURITY] Fedora 10 Update: squirrelmail-1.4.17-2.fc10

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

[SECURITY] Fedora 9 Update: squirrelmail-1.4.17-1.fc9

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

DSA-1682-1 squirrelmail - cross site scripting

Bulletin has no description...

Cross site scripting

Cross-site scripting XSS vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message...

CVE-2008-2379

Cross-site scripting XSS vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message...

CVE-2008-2379

Cross-site scripting XSS vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message...

CVE-2008-2379

CVE-2008-2379 is a cross-site scripting (XSS) vulnerability in SquirrelMail prior to 1.4.17, triggered by a crafted hyperlink in an HTML email part. The underlying issue is insufficient sanitization of HTML mail, allowing remote attackers to inject script/HTML in a user session. Related advisorie...

FreeBSD : squirrelmail -- XSS vulnerability (d1ce8a4f-c235-11dd-8cbc-00163e000016)

Squirrelmail team reports : An issue was fixed that allowed an attacker to send specially- crafted hyperlinks in a message that could execute cross-site scripting XSS when the user viewed the message in SquirrelMail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SquirrelMail畸形邮件消息HTML注入漏洞

BUGTRAQ ID: 32603 CVECAN ID: CVE-2008-2379 SquirrelMail是一个多功能的用PHP4实现的Webmail程序，可运行于Linux/Unix类操作系统下。 SquirrelMail没有正确地过滤邮件消息的中的HTML部分输入便显示给了用户。如果打开了恶意的邮件消息的话，就可能导致在用户浏览器会话中执行任意代码。成功攻击要求Options - Display Preferences中启用了Show HTML Version by Default选项。 SquirrelMail 1.4.16 SquirrelMail ------------...