DSA-535 squirrelmail - several vulnerabilities

Bulletin has no description...

CVE-2004-0639

Multiple cross-site scripting XSS vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via 1 the $mailer variable in readbody.php, 2 the $senderNamespart variable in mailboxdisplay.php, and possibly other vectors including 3 the $eventtitle...

RHEL 3 : squirrelmail (RHSA-2004:240)

An updated SquirrelMail package that fixes several security vulnerabilities is now available. SquirrelMail is a webmail package written in PHP. Multiple vulnerabilities have been found which affect the version of SquirrelMail shipped with Red Hat Enterprise Linux 3. A SQL injection flaw was found...

CVE-2004-0519

Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php...

SquirrelMail < 1.4.3 Multiple Vulnerabilities

The remote host is running SquirrelMail, a web-based mail server. There are several flaws in all versions less than 1.4.3 and development versions 1.5.0 and 1.5.1 that allow for local root access and remote cross-site scripting XSS attacks. Nessus has determined the vulnerability exists on the...

SquirrelMail shell characters command execution

Uncommented shell characters in parsing To: headers in PGP plugin...

SquirrelMail Multiple Remote Vulnerabilities

The remote host is running SquirrelMail, a web-based mail server. There is a flaw in the remote installation that could allow an attacker with a valid webmail account to read, move and delete arbitrary files on this server, with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable...

SquirrelMail 1.2.11 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/7952/info Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation. The problems appear to occur due to insufficient sanitization of URI parameters submitted withi...

SquirrelMail 1.2.11 - Multiple Vulnerabilities

SquirrelMail 1.2.11 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/7952/info Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation. The problems appear to occur due to insufficient...

SquirrelMail 1.2.11 - 'move_messages.php' Arbitrary File Moving

source: https://www.securityfocus.com/bid/7952/info Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation. The problems appear to occur due to insufficient sanitization of URI parameters submitted withi...

SquirrelMail 1.2.11 Administrator Plugin - options.php Arbitrary Admin Account Creation

SquirrelMail 1.2.11 Administrator Plugin - options.php Arbitrary Admin Account Creation source: https://www.securityfocus.com/bid/7952/info Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation. The...

SquirrelMail 1.2.11 - move_messages.php Arbitrary File Moving

SquirrelMail 1.2.11 - movemessages.php Arbitrary File Moving source: https://www.securityfocus.com/bid/7952/info Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation. The problems appear to occur due t...

CVE-2003-0160

Multiple cross-site scripting XSS vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser...

CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...

SquirrelMail 1.2.6/1.2.7 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/5763/info SquirrelMail is a feature rich webmail program implemented in the PHP4 language. It is available for Linux and Unix based operating systems. Multiple cross site scripting vulnerabilities have been discovered in various PHP scripts included with...

SquirrelMail 1.2.61.2.7 - Multiple Cross-Site Scripting Vulnerabilities

SquirrelMail 1.2.61.2.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/5763/info SquirrelMail is a feature rich webmail program implemented in the PHP4 language. It is available for Linux and Unix based operating systems. Multiple cross site scripting...