Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 3 enterprise_linux:3::as | squirrelmail | 0:1.4.8-6.el3 |
| Red Hat · RHEL 3 enterprise_linux:3::desktop | squirrelmail | 0:1.4.8-6.el3 |
| Red Hat · RHEL 3 enterprise_linux:3::es | squirrelmail | 0:1.4.8-6.el3 |
| Red Hat · RHEL 3 enterprise_linux:3::ws | squirrelmail | 0:1.4.8-6.el3 |
| Red Hat · RHEL 4 enterprise_linux:4::as | squirrelmail | 0:1.4.8-4.0.1.el4 |
| Red Hat · RHEL 4 enterprise_linux:4::desktop | squirrelmail | 0:1.4.8-4.0.1.el4 |
| Red Hat · RHEL 4 enterprise_linux:4::es | squirrelmail | 0:1.4.8-4.0.1.el4 |
| Red Hat · RHEL 4 enterprise_linux:4::ws | squirrelmail | 0:1.4.8-4.0.1.el4 |
| Red Hat · RHEL 5 enterprise_linux:5::client_workstation | squirrelmail | 0:1.4.8-4.0.1.el5 |
| Red Hat · RHEL 5 enterprise_linux:5::server | squirrelmail | 0:1.4.8-4.0.1.el5 |
Vulnerabilities 2
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remot…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attac…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
http://www.squirrelmail.org/security/issue/2007-05-09
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=239647
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=239828
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0358.json
-
report
https://access.redhat.com/security/cve/CVE-2007-1262
-
advisory
https://www.cve.org/CVERecord?id=CVE-2007-1262
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2007-1262
-
report
https://access.redhat.com/security/cve/CVE-2007-2589
-
advisory
https://www.cve.org/CVERecord?id=CVE-2007-2589
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2007-2589