Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo GLSA-200506-19 Low Severity: SquirrelMail XSS Threat

gentoo
Calendar Grey June 21, 2005
Scroller Gentoo
SquirrelMail running on Gentoo exhibits minimal severity Cross-Site Scripting vulnerabilities. It is advisable for users to perform an upgrade to remediate this security concern.
Squirrelmail is vulnerable to several cross-site scripting vulnerabilities which could lead to a compromise of webmail accounts.

Summary

Gentoo Linux Security Advisory GLSA 200506-19 https://security.gentoo.org/ Severity: Low Title: SquirrelMail: Several XSS vulnerabilities Date: June 21, 2005 Bugs: #95937 ID: 200506-19

Synopsis ======= Squirrelmail is vulnerable to several cross-site scripting vulnerabilities which could lead to a compromise of webmail accounts.
Background ========= SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 mail-client/squirrelmail < 1.4.4 >= 1.4.4 < 1.4.0
========== SquirrelMail is vulnerable to several cross-site scripting...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
low
Lowest
Low
Medium
High
Critical

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround