CVE-2006-0195

mediumPriorität · verfolgen · 18EPSS 0.021 · 81. PerzentilEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
2.08% (81st) EPSS
CVSS 4.3 · medium
Is it mine?
29 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
enisa_euvd · nvd · redhat_csaf

EPSS · bewertet 2026-10-22

Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobensquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Desktop version 3redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux AS version 3redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux ES version 3redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el3.noarch as a component of Red Hat Enterprise Linux WS version 3redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Desktop version 3redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux AS version 3redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux ES version 3redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el3.src as a component of Red Hat Enterprise Linux WS version 3redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux AS version 4redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux ES version 4redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el4.noarch as a component of Red Hat Enterprise Linux WS version 4redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux AS version 4redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux ES version 4redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
  • Behobensquirrelmail-0:1.4.6-5.el4.src as a component of Red Hat Enterprise Linux WS version 4redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

    https://access.redhat.com/errata/RHSA-2006:0283
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

4.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.7–4.3

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 2.9
v2.03.7lowAV:N/AC:M/Au:N/C:N/I:P/A:N/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-79USLLM-abgeleitet
04

betroffene Produkte (29)

Betroffene Produkte und Versionsbereiche.

20 von 29 angezeigt
05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2006:0283Red Hat Security Advisory: squirrelmail security update2006-05-03csaf · redhat_csafUS

    An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

06

auch bekannt als (2)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvdnvdredhat_csafNVDCVE.orgMITRE
veröffentlicht 2006-02-24geändert 2026-06-16
08

Referenzen (38)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan