Bug 160241 - CAN-2005-1769 Multiple XSS issues in squirrelmail
CAN-2005-1769 Multiple XSS issues in squirrelmail
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: squirrelmail (Show other bugs)
4.0
All Linux
medium Severity medium
: ---
: ---
Assigned To: Warren Togami
public=20050615,impact=moderate,sourc...
: Security
: 165094 (view as bug list)
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2005-06-13 15:20 EDT by Josh Bressers
Modified: 2007-11-30 17:07 EST (History)
3 users (show)

See Also:
Fixed In Version: RHSA-2005-595
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2005-08-03 10:16:04 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
Current upstream patch (22.88 KB, patch)
2005-06-13 15:31 EDT, Josh Bressers
no flags Details | Diff
Latest upstream patch (25.02 KB, patch)
2005-06-14 17:31 EDT, Josh Bressers
no flags Details | Diff

  None (edit)
Description Josh Bressers 2005-06-13 15:20:59 EDT
We, the SquirrelMail project, plan on publicizing the attached patch
upcoming Wednesday, June 15th 2005. We're sending it here to give you
some advance notice to prepare for this if you want to. Sorry for the
short notice but this was mainly caused by the finding of some
additional issues.

- It contains fixes for several cross site scripting attacks, most by
URL manipulation, and some by sending a specially crafted HTML email.
- The attached patch is tentative; further testing or further revealed
issues may warrant changes between now and the release.
- The patch is made against the 1.4.4-release version of SquirrelMail.
- Please do not disclose information about this vulnerability until
Wednesday.
- Credits to many of the findings go to Martijn Brinkers.
Comment 1 Josh Bressers 2005-06-13 15:26:08 EDT
This issue should also affect RHEL3
Comment 2 Josh Bressers 2005-06-13 15:31:09 EDT
Created attachment 115373 [details]
Current upstream patch
Comment 3 Josh Bressers 2005-06-14 17:31:48 EDT
Created attachment 115434 [details]
Latest upstream patch
Comment 5 Mark J. Cox (Product Security) 2005-06-20 06:19:20 EDT
removing embargo
Comment 7 Red Hat Bugzilla 2005-08-03 10:16:05 EDT
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2005-595.html
Comment 8 Jimmy Cho 2005-08-03 23:24:29 EDT
There is a problem with the patch file
squirrelmail-1.4.3a-CAN-2005-1769.patch

the  line

$abook-error =  htmlspecialchars($abook_error);

should be

$abook->error =  htmlspecialchars($abook_error);
Comment 9 Josh Bressers 2005-08-04 00:12:56 EDT
Jindrich,

If you can roll up some new packages without the typo ASAP.  It seems this bug
breaks all addressbooks in squirrelmail.

This type came from upstream, they fixed it without telling anyone.
Comment 10 Jindrich Novy 2005-08-04 03:50:09 EDT
Josh,

packages with the fixed patch are now added.
Comment 11 Warren Togami 2005-08-04 17:07:40 EDT
*** Bug 165094 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.