4.3

CVE-2010-4554

functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Squirrelmail ≫ Squirrelmail Version <= 1.4.21
Squirrelmail ≫ Squirrelmail Version 0.1
Squirrelmail ≫ Squirrelmail Version 0.1.1
Squirrelmail ≫ Squirrelmail Version 0.1.2
Squirrelmail ≫ Squirrelmail Version 0.2
Squirrelmail ≫ Squirrelmail Version 0.2.1
Squirrelmail ≫ Squirrelmail Version 0.3
Squirrelmail ≫ Squirrelmail Version 0.3.1
Squirrelmail ≫ Squirrelmail Version 0.3pre1
Squirrelmail ≫ Squirrelmail Version 0.3pre2
Squirrelmail ≫ Squirrelmail Version 0.4
Squirrelmail ≫ Squirrelmail Version 0.4pre1
Squirrelmail ≫ Squirrelmail Version 0.4pre2
Squirrelmail ≫ Squirrelmail Version 0.5
Squirrelmail ≫ Squirrelmail Version 0.5pre1
Squirrelmail ≫ Squirrelmail Version 0.5pre2
Squirrelmail ≫ Squirrelmail Version 1.0
Squirrelmail ≫ Squirrelmail Version 1.0.1
Squirrelmail ≫ Squirrelmail Version 1.0.2
Squirrelmail ≫ Squirrelmail Version 1.0.3
Squirrelmail ≫ Squirrelmail Version 1.0.4
Squirrelmail ≫ Squirrelmail Version 1.0.5
Squirrelmail ≫ Squirrelmail Version 1.0.6
Squirrelmail ≫ Squirrelmail Version 1.0pre1
Squirrelmail ≫ Squirrelmail Version 1.0pre2
Squirrelmail ≫ Squirrelmail Version 1.0pre3
Squirrelmail ≫ Squirrelmail Version 1.1.0
Squirrelmail ≫ Squirrelmail Version 1.1.1
Squirrelmail ≫ Squirrelmail Version 1.1.2
Squirrelmail ≫ Squirrelmail Version 1.1.3
Squirrelmail ≫ Squirrelmail Version 1.2
Squirrelmail ≫ Squirrelmail Version 1.2.0
Squirrelmail ≫ Squirrelmail Version 1.2.0 Update rc3
Squirrelmail ≫ Squirrelmail Version 1.2.1
Squirrelmail ≫ Squirrelmail Version 1.2.2
Squirrelmail ≫ Squirrelmail Version 1.2.3
Squirrelmail ≫ Squirrelmail Version 1.2.4
Squirrelmail ≫ Squirrelmail Version 1.2.5
Squirrelmail ≫ Squirrelmail Version 1.2.6
Squirrelmail ≫ Squirrelmail Version 1.2.6 Update rc1
Squirrelmail ≫ Squirrelmail Version 1.2.7
Squirrelmail ≫ Squirrelmail Version 1.2.8
Squirrelmail ≫ Squirrelmail Version 1.2.9
Squirrelmail ≫ Squirrelmail Version 1.2.10
Squirrelmail ≫ Squirrelmail Version 1.2.11
Squirrelmail ≫ Squirrelmail Version 1.3.0
Squirrelmail ≫ Squirrelmail Version 1.3.1
Squirrelmail ≫ Squirrelmail Version 1.3.2
Squirrelmail ≫ Squirrelmail Version 1.4
Squirrelmail ≫ Squirrelmail Version 1.4 Update rc1
Squirrelmail ≫ Squirrelmail Version 1.4.0
Squirrelmail ≫ Squirrelmail Version 1.4.0 Update rc1
Squirrelmail ≫ Squirrelmail Version 1.4.0 Update rc2a
Squirrelmail ≫ Squirrelmail Version 1.4.0-r1
Squirrelmail ≫ Squirrelmail Version 1.4.1
Squirrelmail ≫ Squirrelmail Version 1.4.2
Squirrelmail ≫ Squirrelmail Version 1.4.2-r1
Squirrelmail ≫ Squirrelmail Version 1.4.2-r2
Squirrelmail ≫ Squirrelmail Version 1.4.2-r3
Squirrelmail ≫ Squirrelmail Version 1.4.2-r4
Squirrelmail ≫ Squirrelmail Version 1.4.2-r5
Squirrelmail ≫ Squirrelmail Version 1.4.3
Squirrelmail ≫ Squirrelmail Version 1.4.3 Update r3
Squirrelmail ≫ Squirrelmail Version 1.4.3 Update rc1
Squirrelmail ≫ Squirrelmail Version 1.4.3a
Squirrelmail ≫ Squirrelmail Version 1.4.3aa
Squirrelmail ≫ Squirrelmail Version 1.4.4
Squirrelmail ≫ Squirrelmail Version 1.4.4 Update rc1
Squirrelmail ≫ Squirrelmail Version 1.4.5
Squirrelmail ≫ Squirrelmail Version 1.4.5 Update rc1
Squirrelmail ≫ Squirrelmail Version 1.4.6
Squirrelmail ≫ Squirrelmail Version 1.4.6 Update rc1
Squirrelmail ≫ Squirrelmail Version 1.4.6_cvs
Squirrelmail ≫ Squirrelmail Version 1.4.7
Squirrelmail ≫ Squirrelmail Version 1.4.8
Squirrelmail ≫ Squirrelmail Version 1.4.8.4fc6
Squirrelmail ≫ Squirrelmail Version 1.4.9
Squirrelmail ≫ Squirrelmail Version 1.4.9a
Squirrelmail ≫ Squirrelmail Version 1.4.10
Squirrelmail ≫ Squirrelmail Version 1.4.10a
Squirrelmail ≫ Squirrelmail Version 1.4.11
Squirrelmail ≫ Squirrelmail Version 1.4.12
Squirrelmail ≫ Squirrelmail Version 1.4.13
Squirrelmail ≫ Squirrelmail Version 1.4.15
Squirrelmail ≫ Squirrelmail Version 1.4.15 Update rc1
Squirrelmail ≫ Squirrelmail Version 1.4.15rc1
Squirrelmail ≫ Squirrelmail Version 1.4.16
Squirrelmail ≫ Squirrelmail Version 1.4.17
Squirrelmail ≫ Squirrelmail Version 1.4.18
Squirrelmail ≫ Squirrelmail Version 1.4.19
Squirrelmail ≫ Squirrelmail Version 1.4.20
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.81% 0.757
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
http://rhn.redhat.com/errata/RHSA-2012-0103.html
http://support.apple.com/kb/HT5130
http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/page_header.php?view=patch&r1=14117&r2=14116&pathrev=14117
Patch
http://www.debian.org/security/2011/dsa-2291
http://www.mandriva.com/security/advisories?name=MDVSA-2011:123
http://www.squirrelmail.org/security/issue/2011-07-12
Patch
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=720693
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/68512