CVE-2006-4019

MEDIUM 6.4CVE-2006-4019 · Published 11/08/2006 · updated 16/06/2026

In short

CVE-2006-4019 is a MEDIUM (CVSS 6.4) vulnerability affecting squirrelmail (squirrelmail).
Chance of exploitation in the next 30 days (EPSS): 10.0%, higher than 95.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
squirrelmail squirrelmail	`= 1.4.0= 1.4.1= 1.4.2= 1.4.3= 1.4.3_r3= 1.4.3_rc1= 1.4.3a= 1.4.4= 1.4.4_rc1= 1.4.5= 1.4.6= 1.4.6_rc1= 1.4.7= 1.44= 1.4_rc1`	No fix yet

Description

Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.

References

patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
attrition.org/pipermail/vim/2006-August/000970.html
docs.info.apple.com/article.html
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
marc.info
secunia.com/advisories/21354 · Patch
secunia.com/advisories/21444
secunia.com/advisories/21586
secunia.com/advisories/22080
secunia.com/advisories/22104
secunia.com/advisories/22487
secunia.com/advisories/26235
securitytracker.com/id
debian.org/security/2006/dsa-1154
mandriva.com/security/advisories

More vulnerabilities in squirrelmail

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free