Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: 202112-15 Critical: SquirrelMail XSS Vulnerability Alert

gentoo
Calendar Grey June 15, 2004
Scroller Gentoo
A security flaw in SquirrelMail might endanger user accounts. All users of the software are urged to upgrade.
Squirrelmail fails to properly sanitize user input, which could lead to a compromise of webmail accounts.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200406-08
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Squirrelmail: Another XSS vulnerability
      Date: June 15, 2004
      Bugs: #52434
        ID: 200406-08


Synopsis
=======
Squirrelmail fails to properly sanitize user input, which could lead to
a compromise of webmail accounts.

Background
=========
SquirrelMail is a webmail package written in PHP. It supports IMAP and
SMTP, and can optionally be installed with SQL support.

Affected packages
================
    -------------------------------------------------------------------
     Package                   /     Vulnerable     /       Unaffected
    -------------------------------------------------------------------
  1  mail-client/squirrelmail      <= 1.4.3_rc1-r1            >= 1.4.3

==========
A new cross-site scripting (XSS) vulnerability in
Squirrelmail-1.4.3_rc1 has been discovered....
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory squirrelmail gentoo linux xss exploit webmail security normal severity

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory squirrelmail gentoo linux xss exploit webmail security normal severity

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround