6.4

CVE-2006-4019

Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Squirrelmail ≫ Squirrelmail Version1.4.0
Squirrelmail ≫ Squirrelmail Version1.4.1
Squirrelmail ≫ Squirrelmail Version1.4.2
Squirrelmail ≫ Squirrelmail Version1.4.3
Squirrelmail ≫ Squirrelmail Version1.4.3_r3
Squirrelmail ≫ Squirrelmail Version1.4.3_rc1
Squirrelmail ≫ Squirrelmail Version1.4.3a
Squirrelmail ≫ Squirrelmail Version1.4.4
Squirrelmail ≫ Squirrelmail Version1.4.4_rc1
Squirrelmail ≫ Squirrelmail Version1.4.5
Squirrelmail ≫ Squirrelmail Version1.4.6
Squirrelmail ≫ Squirrelmail Version1.4.6_rc1
Squirrelmail ≫ Squirrelmail Version1.4.7
Squirrelmail ≫ Squirrelmail Version1.4_rc1
Squirrelmail ≫ Squirrelmail Version1.44
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.8% 0.95
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://docs.info.apple.com/article.html?artnum=306172
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
http://secunia.com/advisories/26235
http://www.securityfocus.com/bid/25159
http://www.vupen.com/english/advisories/2007/2732
http://secunia.com/advisories/22080
http://www.novell.com/linux/security/advisories/2006_23_sr.html
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
http://secunia.com/advisories/22487
http://www.mandriva.com/security/advisories?name=MDKSA-2006:147
http://attrition.org/pipermail/vim/2006-August/000970.html
http://marc.info/?l=full-disclosure&m=115532449024178&w=2
http://secunia.com/advisories/21354
Patch
Vendor Advisory
http://secunia.com/advisories/21444
http://secunia.com/advisories/21586
http://secunia.com/advisories/22104
http://securitytracker.com/id?1016689
http://www.debian.org/security/2006/dsa-1154
http://www.osvdb.org/27917
http://www.redhat.com/support/errata/RHSA-2006-0668.html
http://www.securityfocus.com/archive/1/442980/100/0/threaded
http://www.securityfocus.com/archive/1/442993/100/0/threaded
http://www.securityfocus.com/bid/19486
http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-full.patch
Patch
http://www.squirrelmail.org/security/issue/2006-08-11
Patch
http://www.vupen.com/english/advisories/2006/3271
https://exchange.xforce.ibmcloud.com/vulnerabilities/28365
https://issues.rpath.com/browse/RPL-577
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11533