RHSA-2004:654

csafUSredhat_csaf

Red Hat Security Advisory: squirrelmail security update

view advisory published 2004-12-23

An updated SquirrelMail package that fixes a cross-site scripting vulnerability is now available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2004-1036USmedium6.8—
Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004,…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • Fixedsquirrelmail-0:1.4.3a-7.EL3.noarch as a component of Red Hat Desktop version 3

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:654
  • Fixedsquirrelmail-0:1.4.3a-7.EL3.noarch as a component of Red Hat Enterprise Linux AS version 3

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:654
  • Fixedsquirrelmail-0:1.4.3a-7.EL3.noarch as a component of Red Hat Enterprise Linux ES version 3

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:654
  • Fixedsquirrelmail-0:1.4.3a-7.EL3.noarch as a component of Red Hat Enterprise Linux WS version 3

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:654
  • Fixedsquirrelmail-0:1.4.3a-7.EL3.src as a component of Red Hat Desktop version 3

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:654
  • Fixedsquirrelmail-0:1.4.3a-7.EL3.src as a component of Red Hat Enterprise Linux AS version 3

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:654
  • Fixedsquirrelmail-0:1.4.3a-7.EL3.src as a component of Red Hat Enterprise Linux ES version 3

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:654
  • Fixedsquirrelmail-0:1.4.3a-7.EL3.src as a component of Red Hat Enterprise Linux WS version 3

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2004:654
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan