PT-2009-3900 · Squirrelmail · Squirrelmail

Name of the Vulnerable Software and Affected Versions: SquirrelMail versions prior to 1.4.19-1 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. This is due to an incomplete fix for a...