|
|
| |
|
| |
squirrelmail: arbitrary code execution
| Package(s): | squirrelmail |
CVE #(s): | CVE-2005-1924
CVE-2006-4169
|
| Created: | August 13, 2007 |
Updated: | August 15, 2007 |
| Description: |
There is a vulnerability in the squirrelmail G/PGP plugin:
An authenticated user could use the plugin to execute arbitrary code on
the server, or a remote attacker could send a specially crafted e-mail
to a SquirrelMail user, possibly leading to the execution of arbitrary
code with the privileges of the user running the underlying web server.
Note that the G/PGP plugin is disabled by default. |
| Alerts: |
|
( Log in to post comments)
|
|
|