iDEFENSE Security Advisory 02.07.05: SquirrelMail S/MIME Plugin Command Injection Vulnerability

SquirrelMail S/MIME Plugin Command Injection Vulnerability iDEFENSE Security Advisory 02.07.05 www.idefense.com/application/poi/display?id=191&type=vulnerabilities February 07, 2005 I. BACKGROUND Squirrelmail S/MIME plugin enables the viewing of S/MIME-signed messages of the MIME "multipart/signe...

CVE-2005-0239

The CVE-2005-0239 vulnerability affects the S/MIME plug‑in for SquirrelMail (versions 0.4 and 0.5). The flaw arises from inadequate sanitization of the cert parameter in viewcert.php, allowing remote attackers to construct shell metacharacters and execute arbitrary commands on the web server. Imp...

CVE-2005-0239

viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter...

CVE-2005-0184

CVE-2005-0184 describes a directory traversal vulnerability in the ftpfile component of the Vacation plugin (0.15 and earlier) for Squirrelmail. The issue allows local users to read arbitrary files via a .. path in a get request. Affected product: Squirrelmail Vacation plugin (version 0.15 and ea...

CVE-2005-0104

CVE-2005-0104 is a cross-site scripting (XSS) vulnerability in SquirrelMail’s webmail.php prior to 1.4.4. The issue allows an attacker to inject arbitrary web script or HTML via certain integer variables, enabling an unchecked/unsanitized input path that can be reflected to users. Public referenc...

CVE-2005-0152

CVE-2005-0152 affects SquirrelMail 1.2.6 and allows remote code execution via URL manipulation. The underlying issue is an unsanitised variable that can lead to arbitrary code execution with the web server user (e.g., www-data). Debian’s advisories (DSA-662-1/2) note fixes: upgrade to squirrelmai...

CVE-2005-0183

The CVE-2005-0183 issue affects the Vacation plugin (version 0.15 and earlier) used with Squirrelmail. Local users can execute arbitrary commands by injecting shell metacharacters into a command-line argument, due to improper handling in ftpfile within the plugin. This leads to potential compromi...

CVE-2005-0183

ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument...

CVE-2005-0184

Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. dot dot in a get request...

CVE-2005-0103

PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code...

CVE-2005-0104

Cross-site scripting XSS vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables...

CVE-2005-0152

PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "URL manipulation."...

CVE-2005-0075

prefs.php in SquirrelMail before 1.4.4, with registerglobals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers...

CVE-2005-0075

CVE-2005-0075 affects SquirrelMail

CVE-2005-0103

CVE-2005-0103 is a remote code execution vulnerability in SquirrelMail

CVE-2005-0152

PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "URL manipulation."...

CVE-2005-0152

PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "URL manipulation."...

Debian DSA-662-2 : squirrelmail - several vulnerabilities

Andrew Archibald discovered that the last update to squirrelmail which was intended to fix several problems caused a regression which got exposed when the user hits a session timeout. For completeness below is the original advisory text : Several vulnerabilities have been discovered in...

[SECURITY] [DSA 662-1] New squirrelmail package fixes several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 662-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 662-1] New squirrelmail package fixes several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 662-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2005 http://www.debian.org/security/faq -...