Bug 182406

Summary:	SA18985 SquirrelMail Cross-Site Scripting and IMAP Injection Vulnerabilities
Product:	[Fedora] Fedora	Reporter:	Ignacio Vazquez-Abrams <ivazqueznet>
Component:	squirrelmail	Assignee:	Warren Togami <wtogami>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4	CC:	wtogami
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://secunia.com/advisories/18985/
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-03-07 21:26:27 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	171491

Description Ignacio Vazquez-Abrams 2006-02-22 12:32:54 UTC

"Some vulnerabilities have been reported in SquirrelMail, which can be exploited
by malicious users to manipulate certain information and by malicious people to
conduct cross-site scripting attacks."

"The vulnerabilities have been reported in version 1.4.5 and prior."