CVE-2006-0377

MEDIO 5.0CVE-2006-0377 · Published 24/02/2006 · updated 16/06/2026

In breve

CVE-2006-0377 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda squirrelmail (squirrelmail).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 83.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
squirrelmail squirrelmail	`= 1.4= 1.4.1= 1.4.2= 1.4.3= 1.4.3_r3= 1.4.3_rc1= 1.4.3a= 1.4.4= 1.4.4_rc1= 1.4.5= 1.4.6_rc1= 1.4_rc1`	No fix yet

Description

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."

References

patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
secunia.com/advisories/18985 · Vendor Advisory
secunia.com/advisories/19130
secunia.com/advisories/19131
secunia.com/advisories/19176
secunia.com/advisories/19205
secunia.com/advisories/19960
secunia.com/advisories/20210
securitytracker.com/id · Patch
debian.org/security/2006/dsa-988
gentoo.org/security/en/glsa/glsa-200603-09.xml
mandriva.com/security/advisories
novell.com/linux/security/advisories/2006_05_sr.html
redhat.com/archives/fedora-announce-list/2006-March/msg00004.html
redhat.com/support/errata/RHSA-2006-0283.html

Altre vulnerabilità di squirrelmail

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free