Red Hat Security Advisory: squirrelmail security update
An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2006-0188US | medium4.3 | — | ||
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right_frame parameter. NOTE: this has been c… | ||||
| CVE-2006-0195US | medium4.3 | — | ||
Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with… | ||||
| CVE-2006-0377US | medium5.0 | — | ||
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_… | ||||
references
External citations — patches, advisories, analysis.
- http://www.redhat.com/security/updates/classification/#moderateexternal
- https://access.redhat.com/errata/RHSA-2006:0283self
- 182579external
- 182581external
- 182584external
- Canonical URLself
remediations (48)
- Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Desktop version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Desktop version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Desktop version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Desktop version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Desktop version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Desktop version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux AS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux ES version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux WS version 3
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux AS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux AS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux AS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux Desktop version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux Desktop version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux Desktop version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux ES version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux ES version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux ES version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux WS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux WS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux WS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux AS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux AS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux AS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux Desktop version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux Desktop version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux Desktop version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux ES version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux ES version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux ES version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux WS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux WS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283 - Fixedsquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux WS version 4
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2006:0283
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan