exploits , vulnerabilities , articles , SquirrelMail Prior to 1.4.18 Multiple Vulnerabilities

Title	SquirrelMail Prior to 1.4.18 Multiple Vulnerabilities
Published	2009-05-12-12:00AM
Updated	2009-05-13-10:26AM
Class	Unknown
CVE	CVE-2009-1578 E-2009-1579CV 2009-1580CVE- 09-1581
Remote	Yes
Local	No
Credit	Christian Balzer, Luc Beurton, Tomas Hoger, and Niels Teusink
Vulnerable	SquirrelMail SquirrelMail 1.4.17 SquirrelMail SquirrelMail 1.4.16 SquirrelMail SquirrelMail 1.4.15 SquirrelMail SquirrelMail 1.4.12 SquirrelMail SquirrelMail 1.4.11 SquirrelMail SquirrelMail 1.4.9 a Debian Linux 4.0 SquirrelMail SquirrelMail 1.4.8 SquirrelMail SquirrelMail 1.4.7 SquirrelMail SquirrelMail 1.4.6 rc1 SquirrelMail SquirrelMail 1.4.6 cvs SquirrelMail SquirrelMail 1.4.6 SquirrelMail SquirrelMail 1.4.5 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 SquirrelMail SquirrelMail 1.4.4 RC1 SquirrelMail SquirrelMail 1.4.4 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 s/390 Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 ppc Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mipsel Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 mips Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 m68k Debian Linux 3.1 m68k Debian Linux 3.1 ia64 Debian Linux 3.1 ia64 Debian Linux 3.1 ia64 Debian Linux 3.1 ia32 Debian Linux 3.1 ia32 Debian Linux 3.1 ia32 Debian Linux 3.1 hppa Debian Linux 3.1 hppa Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 arm Debian Linux 3.1 arm Debian Linux 3.1 alpha Debian Linux 3.1 alpha Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.1 Debian Linux 3.1 Gentoo Linux Gentoo Linux Gentoo Linux SquirrelMail SquirrelMail 1.4.3 RC1 SquirrelMail SquirrelMail 1.4.3 r3 Gentoo Linux SquirrelMail SquirrelMail 1.4.3 a Conectiva Linux 9.0 RedHat Fedora Core3 RedHat Fedora Core3 RedHat Fedora Core3 RedHat Fedora Core2 RedHat Fedora Core2 SquirrelMail SquirrelMail 1.4.3 SquirrelMail SquirrelMail 1.4.2 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 RedHat Fedora Core2 RedHat Fedora Core2 RedHat Fedora Core2 SquirrelMail SquirrelMail 1.4.1 SquirrelMail SquirrelMail 1.4 RC1 SquirrelMail SquirrelMail 1.4 SquirrelMail SquirrelMail 1.2.11 SquirrelMail SquirrelMail 1.2.10 SquirrelMail SquirrelMail 1.2.9 SquirrelMail SquirrelMail 1.2.8 Terra Soft Solutions Yellow Dog Linux 3.0 SquirrelMail SquirrelMail 1.2.7 RedHat Linux 8.0 SquirrelMail SquirrelMail 1.2.6 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 alpha Debian Linux 3.0 Debian Linux 3.0 SquirrelMail SquirrelMail 1.2.5 SquirrelMail SquirrelMail 1.2.4 SquirrelMail SquirrelMail 1.2.3 SquirrelMail SquirrelMail 1.2.2 SquirrelMail SquirrelMail 1.2.1 SquirrelMail SquirrelMail 1.2 .0 SquirrelMail SquirrelMail 1.0.5 SquirrelMail SquirrelMail 1.0.4 RedHat Fedora 9 0 RedHat Fedora 10 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0
Not Vulnerable	SquirrelMail SquirrelMail 1.4.18
Code	Attackers can exploit these issues through a browser. To exploit the cross-site scripting and session-fixation issues, the attacker must entice unsuspecting users to follow a malicious URI.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-04 Achievo Document Types Section Arbitrary File Upload Vulnerability
2009-12-04 Achievo Scheduler Category HTML Injection Vulnerability
2009-12-04 Yoast Google Analytics for WordPress Plugin 404 Error Page Cross Site Scripting Vulnerability
2009-12-04 DevIL DICOM File Handling Remote Buffer Overflow Vulnerability
2009-12-04 Invision Power Board Local File Include and SQL Injection Vulnerabilities
2009-12-04 Mozilla Firefox Yoono Extension DOM Event Handler Cross Domain Scripting Vulnerability
2009-12-04 UBB.threads Multiple File Include Vulnerabilities
2009-12-04 Expat Unspecified XML Parsing Remote Denial of Service Vulnerability
2009-12-04 Apple Mac OS X Java Applet Certificate Validation Security Bypass Vulnerability
2009-12-04 QEMU Virtio Networking Remote Denial of Service Vulnerability