CVE-2008-3663

EPSS 1.27%
Published 24.09.2008 14:56:52
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.

Affected products Warnungen 0 Metrics 2 CWE 0 References 15

Data is provided by the National Vulnerability Database (NVD)

Squirrelmail ≫ Squirrelmail Version1.4.15

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.27%	0.789

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

http://secunia.com/advisories/33937

http://support.apple.com/kb/HT3438

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html

http://int21.de/cve/CVE-2008-3663-squirrelmail.html

http://securityreason.com/securityalert/4304

http://www.nabble.com/ANNOUNCE:-SquirrelMail-1.4.16-Released-td19711998.html

http://www.securityfocus.com/archive/1/496601/100/0/threaded

http://www.securityfocus.com/bid/31321

https://exchange.xforce.ibmcloud.com/vulnerabilities/45700

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10548

https://nvd.nist.gov/vuln/detail/CVE-2008-3663

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3663

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3663

EUVD