FreeBSD : squirrelmail -- XSS vulnerability (7fbfe159-3438-11d9-a9e7-0001020eed82)

High Nessus Plugin ID 37822


The remote FreeBSD host is missing one or more security-related updates.


A SquirrelMail Security Notice reports :

There is a cross site scripting issue in the decoding of encoded text in certain headers. SquirrelMail correctly decodes the specially crafted header, but doesn't sanitize the decoded strings.


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 37822

File Name: freebsd_pkg_7fbfe159343811d9a9e70001020eed82.nasl

Version: $Revision: 1.10 $

Type: local

Published: 2009/04/23

Modified: 2014/08/14

Dependencies: 12634

Risk Information

Risk Factor: High

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:ja-squirrelmail, p-cpe:/a:freebsd:freebsd:squirrelmail, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2004/11/12

Vulnerability Publication Date: 2004/11/03