CVE-2005-2095

mediumPriorität · verfolgen · 28EPSS 0.042 · 91. PerzentilExploit · PoCEUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
1 exploit · PoC
Likely / severe?
4.24% (91st) EPSS
CVSS 4.3 · medium
Is it mine?
39 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
enisa_euvd · nvd · redhat_csaf

EPSS · bewertet 2026-10-21

options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobensquirrelmail-0:1.4.3a-11.EL3.noarch as a component of Red Hat Desktop version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.noarch as a component of Red Hat Enterprise Linux AS version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.noarch as a component of Red Hat Enterprise Linux ES version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.noarch as a component of Red Hat Enterprise Linux WS version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.src as a component of Red Hat Desktop version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.src as a component of Red Hat Enterprise Linux AS version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.src as a component of Red Hat Enterprise Linux ES version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-11.EL3.src as a component of Red Hat Enterprise Linux WS version 3redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.noarch as a component of Red Hat Enterprise Linux AS version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.noarch as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.noarch as a component of Red Hat Enterprise Linux ES version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.noarch as a component of Red Hat Enterprise Linux WS version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.src as a component of Red Hat Enterprise Linux AS version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.src as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.src as a component of Red Hat Enterprise Linux ES version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
  • Behobensquirrelmail-0:1.4.3a-12.EL4.src as a component of Red Hat Enterprise Linux WS version 4redhat_csaf

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Additionally, users will have to bring up the "Network Proxy" dialog and reset their keys for the settings to take place.

    https://access.redhat.com/errata/RHSA-2005:595
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

4.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.9–4.3

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 2.9
v2.03.9lowAV:N/AC:M/Au:N/C:P/I:N/A:N/E:POCsecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USCWE-284USCWE-79US
04

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

05

betroffene Produkte (39)

Betroffene Produkte und Versionsbereiche.

20 von 39 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2005:595Red Hat Security Advisory: squirrelmail security update2005-08-03csaf · redhat_csafUS

    An updated squirrelmail package that fixes two security issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. [Updated 04 Aug 2005] The previous SquirrelMail package released with this errata contained a bug which rendered the addressbook unusable. The erratum has been updated with a package which corrects this issue.

07

auch bekannt als (2)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvdnvdredhat_csafNVDCVE.orgMITRE
veröffentlicht 2005-07-13geändert 2026-06-16
09

Referenzen (26)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan