SquirrelMail PGP Plugin Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SquirrelMail...

CentOS Security Advisory CESA-2009:1490 (squirrelmail)

The remote host is missing updates to squirrelmail announced in advisory CESA-2009:1490. CESA-2009:1490 65756 4 $Id: ovcesa20091490.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1490 squirrelmail Authors: Thomas Reinke Copyright: Copyright c 2009...

RedHat Security Advisory RHSA-2009:1490

The remote host is missing updates announced in advisory RHSA-2009:1490. SquirrelMail is a standards-based webmail package written in PHP. Form submissions in SquirrelMail did not implement protection against Cross-Site Request Forgery CSRF attacks. If a remote attacker tricked a user into visiti...

RedHat Security Advisory RHSA-2009:1490

The remote host is missing updates announced in advisory RHSA-2009:1490. SquirrelMail is a standards-based webmail package written in PHP. Form submissions in SquirrelMail did not implement protection against Cross-Site Request Forgery CSRF attacks. If a remote attacker tricked a user into visiti...

CentOS Security Advisory CESA-2009:1490 (squirrelmail)

The remote host is missing updates to squirrelmail announced in advisory CESA-2009:1490. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RHEL 3 / 4 / 5 : squirrelmail (RHSA-2009:1490)

An updated squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP. Form...

CentOS 3 / 4 : squirrelmail (CESA-2009:1490)

An updated squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP. Form...

squirrelmail security update

CentOS Errata and Security Advisory CESA-2009:1490 An updated squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a...

Moderate: Red Hat Security Advisory: squirrelmail security update

An updated squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP. Form...

squirrelmail: CSRF issues in all forms

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to 1 functions/mailboxdisplay.php, 2...

squirrelmail security update

1.4.8-5.0.1.el54.10 - Remove Redhat splash screen images 1.4.8-5.10 - fix: CVE-2009-2964 : CSRF issues in all forms - extend to all forms 1.4.8-5.9 - fix: CVE-2009-2964 : CSRF issues in all forms - add missing parts 1.4.8-5.8 - fix: CVE-2009-2964 : CSRF issues in all forms...

openSUSE 10 Security Update : squirrelmail (squirrelmail-6457)

The previous fix for a vulnerability that allowed an attacker to run arbitrary commands on the server was incomplete CVE-2009-1381. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : squirrelmail-plugins (squirrelmail-plugins-6458)

The squirrelmail security update caused problems with some plugins, preventing users from logging in. if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit0; C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Fedora Core 11 FEDORA-2009-8822 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-8822. OpenVAS Vulnerability Test $Id: fcore20098822.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8822 squirrelmail Authors: Thomas Reinke Copyright: Copyright...

Mandrake Security Advisory MDVSA-2009:222 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory MDVSA-2009:222. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:222 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory MDVSA-2009:222. OpenVAS Vulnerability Test $Id: mdksa2009222.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:222 squirrelmail Authors: Thomas Reinke Copyright: Copyright c 20...

Fedora Core 11 FEDORA-2009-8822 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-8822. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-8797 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-8797. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-8797 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-8797. OpenVAS Vulnerability Test $Id: fcore20098797.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8797 squirrelmail Authors: Thomas Reinke Copyright: Copyright...

[ MDVSA-2009:222 ] squirrelmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:222 http://www.mandriva.com/security/ Package : squirrelmail Date : August 28, 2009 Affected: Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in...