CVE-2010-1637

概要

参考情報

• conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf · Broken Link
• lists.apple.com/archives/security-announce/2012/Feb/msg00000.html · Mailing List
• lists.fedoraproject.org/pipermail/package-announce/2010-June/043239.html · Mailing List
• lists.fedoraproject.org/pipermail/package-announce/2010-June/043258.html · Mailing List
• lists.fedoraproject.org/pipermail/package-announce/2010-June/043261.html · Mailing List
• rhn.redhat.com/errata/RHSA-2012-0103.html · Third Party Advisory
• secunia.com/advisories/40307 · Broken Link
• squirrelmail.org/security/issue/2010-06-21 · Patch
• squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/functions.php · Product
• squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/options.php · Patch
• support.apple.com/kb/HT5130 · Third Party Advisory
• mandriva.com/security/advisories · Broken Link
• openwall.com/lists/oss-security/2010/05/25/3 · Mailing List
• openwall.com/lists/oss-security/2010/05/25/9 · Mailing List
• openwall.com/lists/oss-security/2010/06/21/1 · Mailing List
• securityfocus.com/bid/40291 · Broken Link
• securityfocus.com/bid/40307 · Broken Link
• vupen.com/english/advisories/2010/1535 · Broken Link
• vupen.com/english/advisories/2010/1536 · Broken Link
• vupen.com/english/advisories/2010/1554 · Broken Link

squirrelmail のその他の脆弱性

• CVE-2020-14933高 8.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendo…
• CVE-2020-14932緊急 9.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related t…
• CVE-2019-12970中 6.1XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the…
• CVE-2018-14955中 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
• CVE-2018-14954中 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.