Description
The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php. NOTE: a parameter value can be set in the contents of an e-mail message.
References
- 26035 third-party-advisory
- 37931 vdb-entry
- [dailydave] 20070709 SquirrelMail GPG Plugin vuln mailing-list
- 20070711 SquirrelMail G/PGP Plugin gpg_check_sign_pgp_mime() Command Injection Vulnerability third-party-advisory
- 24874 vdb-entry
- 20070710 SquirrelMail GPG Plugin Vulnerabilities mailing-list
- ADV-2007-2513 vdb-entry
- [dailydave] 20070708 SquirrelMail GPG Plugin vuln mailing-list
- squirrelmail-gpgp-hook-command-execution(35363) vdb-entry
- 20070711 True: SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln mailing-list