Multiple Webmail products contain a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate Content-Type upon submission to the mime.php script (or whatever script controls header content-type). This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Upgrade to version 1.4.3, 1.5.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• OVAL ID: 1012
• Bugtraq ID: 10439
• Secunia Advisory ID: 11734 11778 11805 11870 11875 11884 12289
• CVE ID: 2004-0520 (see also: NVD)
• Related OSVDB ID: 55372
• Vendor Specific Solution URL: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc http://www.gentoo.org/security/en/glsa/glsa-200406-08.xml
• Mail List Post: http://marc.theaimsgroup.com/?l=bugtraq&m=108611554415078&w=2
  http://marc.theaimsgroup.com/?l=full-disclosure&m=108588315114441&w=2
  http://marc.theaimsgroup.com/?l=squirrelmail-cvs&m=108532891231712
• Vendor Specific Advisory URL: http://rhn.redhat.com/errata/RHSA-2004-240.html
• Other Advisory URL: http://security.gentoo.org/glsa/glsa-200406-11.xml
  http://www.debian.org/security/2004/dsa-535
  http://www.gentoo.org/security/en/glsa/glsa-200406-08.xml
  http://www.horde.org/imp/3.2/
  http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt
  http://www.securityfocus.com/advisories/6827
  https://bugzilla.fedora.us/show_bug.cgi?id=1733
• Vendor URL: http://www.squirrelmail.org/
  http://www.squirrelmail.org/changelog.php
• RedHat RHSA: RHSA-2004:240

• Román Medina-Heigl Hernández - romanrs-labs.com -