A new squirrelmail package that fixes a security issue as well as several bugs is now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

SquirrelMail is a standards-based webmail package written in PHP.

A dynamic variable evaluation flaw was found in SquirrelMail. Users who have an account on a SquirrelMail server and are logged in could use this flaw to overwrite variables which may allow them to read or write other users' preferences or attachments. (CVE-2006-4019)

Users of SquirrelMail should upgrade to this erratum package, which contains SquirrelMail 1.4.8 to correct this issue. This package also contains a number of additional patches to correct various bugs.

Note: After installing this update, users are advised to restart their httpd service to ensure that the new version functions correctly.

The SquirrelMail developers report :

A logged in user could overwrite random variables in compose.php, which might make it possible to read/write other users' preferences or attachments.

The installed version of SquirrelMail allows for restoring expired sessions in an unsafe manner.  Using a specially crafted expired session and compose.php, a user can leverage this issue to take control of arbitrary variables used by the affected application, which can lead to other attacks against the system, such as reading or writing of arbitrary files on the system.

From Red Hat Security Advisory 2006:0668 :

A new squirrelmail package that fixes a security issue as well as several bugs is now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

SquirrelMail is a standards-based webmail package written in PHP.

A dynamic variable evaluation flaw was found in SquirrelMail. Users who have an account on a SquirrelMail server and are logged in could use this flaw to overwrite variables which may allow them to read or write other users' preferences or attachments. (CVE-2006-4019)

Users of SquirrelMail should upgrade to this erratum package, which contains SquirrelMail 1.4.8 to correct this issue. This package also contains a number of additional patches to correct various bugs.

Note: After installing this update, users are advised to restart their httpd service to ensure that the new version functions correctly.

James Bercegay of GulfTech Security Research discovered a vulnerability in SquirrelMail where an authenticated user could overwrite random variables in the compose script. This might be exploited to read or write the preferences or attachment files of other users.

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. 

This update contains several security fixes for the following programs :

 - bzip2
 - CFNetwork
 - CoreAudio
 - cscope
 - gnuzip
 - iChat
 - Kerberos
 - mDNSResponder
 - PDFKit
 - PHP
 - Quartz Composer
 - Samba
 - SquirrelMail
 - Tomcat
 - WebCore
 - WebKit

ID	Name	Product	Family	Published	Updated	Severity
22450	CentOS 3 / 4 : squirrelmail (CESA-2006:0668)	Nessus	CentOS Local Security Checks	9/27/2006	1/4/2021	medium
22463	RHEL 3 / 4 : squirrelmail (RHSA-2006:0668)	Nessus	Red Hat Local Security Checks	9/27/2006	1/14/2021	medium
22209	FreeBSD : squirrelmail -- random variable overwrite vulnerability (21b7c550-2a22-11db-a6e2-000e0c2e438a)	Nessus	FreeBSD Local Security Checks	8/14/2006	1/6/2021	medium
22230	SquirrelMail compose.php session_expired_post Arbitrary Variable Overwriting	Nessus	CGI abuses	8/17/2006	4/11/2022	medium
67409	Oracle Linux 4 : squirrelmail (ELSA-2006-0668)	Nessus	Oracle Linux Local Security Checks	7/12/2013	1/14/2021	medium
22696	Debian DSA-1154-1 : squirrelmail - variable overwriting	Nessus	Debian Local Security Checks	10/14/2006	1/4/2021	medium
25830	Mac OS X Multiple Vulnerabilities (Security Update 2007-007)	Nessus	MacOS X Local Security Checks	8/2/2007	7/14/2018	critical

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

critical