CVE-2010-1637

2010-06-2200:00:00

ubuntu.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.2%

JSON

The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote
authenticated users to bypass firewall restrictions and use SquirrelMail as
a proxy to scan internal networks via a modified POP3 port number.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchsquirrelmail< 2:1.4.13-2ubuntu1.6UNKNOWN
ubuntu9.04noarchsquirrelmail< 2:1.4.15-4ubuntu0.4UNKNOWN
ubuntu9.10noarchsquirrelmail< 2:1.4.19-1ubuntu0.2UNKNOWN
ubuntu10.04noarchsquirrelmail< 2:1.4.20-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	squirrelmail	< 2:1.4.13-2ubuntu1.6	UNKNOWN
ubuntu	9.04	noarch	squirrelmail	< 2:1.4.15-4ubuntu0.4	UNKNOWN
ubuntu	9.10	noarch	squirrelmail	< 2:1.4.19-1ubuntu0.2	UNKNOWN
ubuntu	10.04	noarch	squirrelmail	< 2:1.4.20-1ubuntu0.1	UNKNOWN