CVE-2006-0377

MITTEL 5.0CVE-2006-0377 · Published 24/02/2006 · updated 16/06/2026

Kurz gesagt

CVE-2006-0377 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in squirrelmail (squirrelmail).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.4%, höher als bei 83.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
squirrelmail squirrelmail	`= 1.4= 1.4.1= 1.4.2= 1.4.3= 1.4.3_r3= 1.4.3_rc1= 1.4.3a= 1.4.4= 1.4.4_rc1= 1.4.5= 1.4.6_rc1= 1.4_rc1`	No fix yet

Description

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."

References

patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
secunia.com/advisories/18985 · Vendor Advisory
secunia.com/advisories/19130
secunia.com/advisories/19131
secunia.com/advisories/19176
secunia.com/advisories/19205
secunia.com/advisories/19960
secunia.com/advisories/20210
securitytracker.com/id · Patch
debian.org/security/2006/dsa-988
gentoo.org/security/en/glsa/glsa-200603-09.xml
mandriva.com/security/advisories
novell.com/linux/security/advisories/2006_05_sr.html
redhat.com/archives/fedora-announce-list/2006-March/msg00004.html
redhat.com/support/errata/RHSA-2006-0283.html

Weitere Schwachstellen in squirrelmail

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free