Lucene search
FreeBSD21B7C550-2A22-11DB-A6E2-000E0C2E438AHistoryAug 11, 2006 - 12:00 a.m.
squirrelmail -- random variable overwrite vulnerability
2006-08-1100:00:00
vuxml.freebsd.org
21
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.277 Low
EPSS
Percentile
96.8%
The SquirrelMail developers report:
A logged in user could overwrite random variables in
compose.php, which might make it possible to read/write
other users’ preferences or attachments.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | ja-squirrelmail | = 1.4.0 | UNKNOWN |
| FreeBSD | any | noarch | ja-squirrelmail | < 1.4.8,2 | UNKNOWN |
| FreeBSD | any | noarch | squirrelmail | = 1.4.0 | UNKNOWN |
| FreeBSD | any | noarch | squirrelmail | < 1.4.8 | UNKNOWN |
Related
cve
cve
CVE-2006-4019
2006-08-11 21:04:00
nessus
nessus
Fedora Core 5 : squirrelmail-1.4.8-1.fc5 (2006-913)
2007-01-17 00:00:00
Oracle Linux 4 : squirrelmail (ELSA-2006-0668)
2013-07-12 00:00:00
RHEL 3 / 4 : squirrelmail (RHSA-2006:0668)
2006-09-27 00:00:00
openvas
openvas
Debian Security Advisory DSA 1154-1 (squirrelmail)
2008-01-17 00:00:00
FreeBSD Ports: ja-squirrelmail
2008-09-04 00:00:00
Debian: Security Advisory (DSA-1154)
2008-01-17 00:00:00
centos
centos
squirrelmail security update
2006-09-26 13:09:45
debian
debian
[SECURITY] [DSA 1154-1] New squirrelmail packages fix information disclosure
2006-08-20 22:10:12
nvd
nvd
CVE-2006-4019
2006-08-11 21:04:00
redhat
redhat
(RHSA-2006:0668) squirrelmail security update
2006-09-26 00:00:00
veracode
veracode
Dynamic Variable Evaluation
2020-04-10 00:11:16
ubuntucve
ubuntucve
CVE-2006-4019
2006-08-11 00:00:00
exploitpack
exploitpack
SquirrelMail 1.4.7 - Arbitrary Variable Overwrite
2016-08-11 00:00:00
cvelist
cvelist
CVE-2006-4019
2006-08-11 21:00:00
exploitdb
exploitdb
SquirrelMail < 1.4.7 - Arbitrary Variable Overwrite
2016-08-11 00:00:00
oraclelinux
oraclelinux
Moderate squirrelmail security update
2006-11-30 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: squirrelmail-1.4.8-3.fc5
2007-01-17 16:30:01
seebug
seebug
Mac OS X 2007-007更新修复多个安全漏洞
2007-08-02 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.277 Low
EPSS
Percentile
96.8%
Related for 21B7C550-2A22-11DB-A6E2-000E0C2E438A