Red Hat Security Advisory: squirrelmail security update
An updated Squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 3.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2005-0075US | medium5.0 | — | ||
prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers. | ||||
| CVE-2005-0104US | medium4.3 | — | ||
Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables. | ||||
| CVE-2005-0103US | high7.5 | — | ||
PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference… | ||||
references
External citations — patches, advisories, analysis.
- http://www.php.net/register_globalsexternal
- http://www.squirrelmail.org/security/issue/2005-01-14external
- http://www.squirrelmail.org/security/issue/2005-01-19external
- http://www.squirrelmail.org/security/issue/2005-01-20external
- https://access.redhat.com/errata/RHSA-2005:135self
- https://access.redhat.com/security/updates/classification/#lowexternal
- 145384external
- 145964external
remediations (24)
- Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Desktop version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Desktop version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Desktop version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.noarch as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Desktop version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Desktop version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Desktop version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135 - Fixedsquirrelmail-0:1.4.3a-9.EL3.src as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:135
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan