Info

Disclosure

Aug 11, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Squirrelmail contains a flaw that may allow a malicious user to overwrite arbitrary variables in the file compose.php. It is possible that the flaw may allow user preferences or file attachments to be overwritten, resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Upgrade to version 1.4.8 or higher, as it has been reported to fix this vulnerability. In addition, the SquirrelMail Project Team has released a patch for version 1.4.7.

Products

SquirrelMail Project Team	Squirrelmail	1.4.0 RC 1
		1.4.0 RC 2a
		1.4.0
		1.4.1
		1.4.2
		1.4.3-RC1
		1.4.3
		1.4.3a
		1.4.4 RC1
		1.4.4
		1.4.5
		1.4.6
		1.4.7
		1.4.5 Release Candidate 1
		1.4.6 Release Candidate 1

References

Bugtraq ID: 19486
CVE ID: 2006-4019 (see also: NVD)
Secunia Advisory ID: 21354 21444 21586 22080 22104 22487 26235
VUPEN Advisory: ADV-2006-3271
Vendor Specific Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc http://lists.suse.com/archive/suse-security-announce/2006-Sep/0011.html
http://www.squirrelmail.org/security/issue/2006-08-11
http://www.us.debian.org/security/2006/dsa-1154
https://issues.rpath.com/browse/RPL-577
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-08/0241.html
http://attrition.org/pipermail/vim/2006-August/000970.html
Other Advisory URL: http://docs.info.apple.com/article.html?artnum=306172
RedHat RHSA: RHSA-2006:0668

Credit

James Bercegay - securitygulftech.org - GulfTech Security Research

Direct URL: http://osvdb.org/27917