Nom du paquet
squirrelmail
Date
2005-06-30
Advisory ID
MDKSA-2005:108
Affected versions
CS3.0 i586 , CS3.0 x86_64

Problem description

The SquirrelMail PHP package is vulnerable to a number of cross-site scripting problems, most of which were reported by Martijn Brinkers. If an attacker could get a user to read a specially-crafted email or using a manipulated URL, they could execute arbitrary scripts running in the context of the victim's browser, which could lead to cookie theft, compromise of the user's webmail, etc. The updated packages have been patched to correct these problems.

Updated packages

CS3.0 i586

 183b7a7c227551f918d7492460bb6b3e  corporate/3.0/RPMS/squirrelmail-1.4.2-11.1.C30mdk.noarch.rpm
d518ad049ece85134416192604c02d2e  corporate/3.0/RPMS/squirrelmail-poutils-1.4.2-11.1.C30mdk.noarch.rpm
88b3c9159a1b186057f3b858a3533e26  corporate/3.0/SRPMS/squirrelmail-1.4.2-11.1.C30mdk.src.rpm

CS3.0 x86_64

 8fdd9a1cc0ae5ccbbff200a1a3120fdd  x86_64/corporate/3.0/RPMS/squirrelmail-1.4.2-11.1.C30mdk.noarch.rpm
0453dd30fcc737a436dac03191ab44be  x86_64/corporate/3.0/RPMS/squirrelmail-poutils-1.4.2-11.1.C30mdk.noarch.rpm
88b3c9159a1b186057f3b858a3533e26  x86_64/corporate/3.0/SRPMS/squirrelmail-1.4.2-11.1.C30mdk.src.rpm

References