CVE-2005-1769

mediumPriorität · verfolgen · 18EPSS 0.018 · 79. PerzentilEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.83% (79th) EPSS
CVSS 4.3 · medium
Is it mine?
23 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
enisa_euvd · nvd · redhat_csaf

EPSS · bewertet 2026-10-27

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobensquirrelmail-0:1.4.3a-11.EL3.noarch as a component of Red Hat Desktop version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.noarch as a component of Red Hat Enterprise Linux AS version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.noarch as a component of Red Hat Enterprise Linux ES version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.noarch as a component of Red Hat Enterprise Linux WS version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.src as a component of Red Hat Desktop version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.src as a component of Red Hat Enterprise Linux AS version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.src as a component of Red Hat Enterprise Linux ES version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.src as a component of Red Hat Enterprise Linux WS version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.noarch as a component of Red Hat Enterprise Linux AS version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.noarch as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.noarch as a component of Red Hat Enterprise Linux ES version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.noarch as a component of Red Hat Enterprise Linux WS version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.src as a component of Red Hat Enterprise Linux AS version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.src as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.src as a component of Red Hat Enterprise Linux ES version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.src as a component of Red Hat Enterprise Linux WS version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

4.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.7–4.3

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 2.9
v2.03.7lowAV:N/AC:M/Au:N/C:N/I:P/A:N/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-79USLLM-abgeleitet
04

betroffene Produkte (23)

Betroffene Produkte und Versionsbereiche.

20 von 23 angezeigt
05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2005:595Red Hat Security Advisory: squirrelmail security update2005-08-03csaf · redhat_csafUS

    An updated squirrelmail package that fixes two security issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. [Updated 04 Aug 2005] The previous SquirrelMail package released with this errata contained a bug which rendered the addressbook unusable. The erratum has been updated with a package which corrects this issue.

06

auch bekannt als (2)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2005-06-16geändert 2026-06-16
08

Referenzen (20)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan