Lucene search
Ubuntu.comUB:CVE-2009-0030HistoryJan 21, 2009 - 12:00 a.m.
CVE-2009-0030
2009-01-2100:00:00
ubuntu.com
ubuntu.com
15
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.005
Percentile
76.4%
A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID
cookie value for all sessions, which allows remote authenticated users to
access other users’ folder lists and configuration data in opportunistic
circumstances by using the standard webmail.php interface. NOTE: this
vulnerability exists because of an incorrect fix for CVE-2008-3663.
Related
seebug
seebug
SquirrelMail软件包会话处理绕过认证漏洞
2009-02-19 00:00:00
SquirrelMail不安全COOKE泄漏漏洞
2008-09-25 00:00:00
nvd
nvd
CVE-2009-0030
2009-01-21 20:30:00
CVE-2008-3663
2008-09-24 14:56:52
cve
cve
CVE-2009-0030
2009-01-21 20:30:00
CVE-2008-3663
2008-09-24 14:56:52
prion
prion
Design/Logic Flaw
2009-01-21 20:30:00
Design/Logic Flaw
2008-09-24 14:56:00
ubuntucve
ubuntucve
CVE-2008-3663
2008-09-24 00:00:00
cvelist
cvelist
CVE-2009-0030
2009-01-21 20:00:00
CVE-2008-3663
2008-09-24 14:00:00
nessus
nessus
openSUSE 10 Security Update : squirrelmail (squirrelmail-5978)
2009-02-05 00:00:00
SquirrelMail HTTPS Session Cookie Secure Flag Weakness
2009-02-12 00:00:00
Fedora 8 : squirrelmail-1.4.16-1.fc8 (2008-9071)
2008-10-27 00:00:00
oraclelinux
oraclelinux
squirrelmail security update
2009-01-20 00:00:00
squirrelmail security update
2009-01-12 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2009-0057)
2015-10-08 00:00:00
CentOS Update for squirrelmail CESA-2009:0057 centos3 i386
2011-08-09 00:00:00
CentOS Update for squirrelmail CESA-2009:0057 centos3 i386
2011-08-09 00:00:00
veracode
veracode
Session Hijacking
2020-04-10 00:29:08
Information Disclosure
2020-04-10 00:36:07
fedora
fedora
[SECURITY] Fedora 9 Update: squirrelmail-1.4.16-1.fc9
2008-10-23 16:35:48
[SECURITY] Fedora 9 Update: squirrelmail-1.4.17-1.fc9
2008-12-07 04:13:16
[SECURITY] Fedora 8 Update: squirrelmail-1.4.16-1.fc8
2008-10-24 23:48:16
securityvulns
securityvulns
Squirrelmail: Session hijacking vulnerability, CVE-2008-3663
2008-09-24 00:00:00
freebsd
freebsd
squirrelmail -- Session hijacking vulnerability
2008-08-12 00:00:00
redhat
redhat
(RHSA-2009:0057) Important: squirrelmail security update
2009-01-19 00:00:00
(RHSA-2009:0010) Moderate: squirrelmail security update
2009-01-12 00:00:00
centos
centos
squirrelmail security update
2009-01-19 22:38:06
squirrelmail security update
2009-01-12 15:25:30
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS
0.005
Percentile
76.4%
Related for UB:CVE-2009-0030