Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 3 enterprise_linux:3::as | squirrelmail | 0:1.4.8-9.el3 |
| Red Hat · RHEL 3 enterprise_linux:3::desktop | squirrelmail | 0:1.4.8-9.el3 |
| Red Hat · RHEL 3 enterprise_linux:3::es | squirrelmail | 0:1.4.8-9.el3 |
| Red Hat · RHEL 3 enterprise_linux:3::ws | squirrelmail | 0:1.4.8-9.el3 |
| Red Hat · RHEL 4 enterprise_linux:4::as | squirrelmail | 0:1.4.8-5.el4_7.3 |
| Red Hat · RHEL 4 enterprise_linux:4::desktop | squirrelmail | 0:1.4.8-5.el4_7.3 |
| Red Hat · RHEL 4 enterprise_linux:4::es | squirrelmail | 0:1.4.8-5.el4_7.3 |
| Red Hat · RHEL 4 enterprise_linux:4::ws | squirrelmail | 0:1.4.8-5.el4_7.3 |
| Red Hat · RHEL 5 enterprise_linux:5::client_workstation | squirrelmail | 0:1.4.8-5.el5_2.3 |
| Red Hat · RHEL 5 enterprise_linux:5::server | squirrelmail | 0:1.4.8-5.el5_2.3 |
Vulnerabilities 2
-
Unscored —
A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remo…
-
Unscored —
Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a craft…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=480224
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=480488
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0057.json
-
report
https://access.redhat.com/security/cve/CVE-2009-0030
-
advisory
https://www.cve.org/CVERecord?id=CVE-2009-0030
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2009-0030
-
report
https://access.redhat.com/security/cve/CVE-2009-1580
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=500358
-
advisory
https://www.cve.org/CVERecord?id=CVE-2009-1580
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2009-1580