Skip to Content.
Sympa Menu

sm-security - [SM-Security] squirrelmail: several cross site scripting vulnerabilities

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <Thomas.Houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] squirrelmail: several cross site scripting vulnerabilities
  • Date: Mon, 20 Jun 2005 21:59:30 +0200


Synopsis
========
Several cross site scripting vulnerabilties were discovered in squirrelmail.

Background
==========
SquirrelMail is a standards-based webmail package written in PHP4.
It includes built-in pure PHP support for the IMAP and SMTP protocols,
and all pages render in pure HTML 4.0 (with no Javascript) for maximum
compatibility across browsers.

Description
===========
CAN-2005-1769:
Several cross site scripting (XSS) vulnerabilties have been discovered
in SquirrelMail versions 1.4.0 - 1.4.4.
The vulnerabilities are in two categories: the majority can be exploited
through URL manipulation, and some by sending a specially crafted email
to a victim. When done very carefully, this can cause the session of the
user to be hijacked.

Affected packages
=================
squirrelmail in all grimoires (devel, test, stable-rc and stable) is
affected.
This is now fixed in all grimoires (squirrelmail updated to 1.4.5-rc1).

Resolution
==========
All squirrelmail users should upgrade to the latest available version:
# scribe update
# cast -c squirrelmail

References
==========
[ 1 ] Original Advisory
http://www.squirrelmail.org/security/issue/2005-06-15
[ 2 ] CAN-2005-1769
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1769

--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] squirrelmail: several cross site scripting vulnerabilities, Thomas Houssin, 06/20/2005

Archive powered by MHonArc 2.6.24.

Top of Page