Red Hat Bugzilla – Bug 202195
CVE-2006-4019 Squirrelmail authenticated user variable overwriting
Last modified: 2007-11-30 17:07:27 EST
Squirrelmail authenticated user variable overwriting
A bug was fixed in squirrelmail 1.4.8 which could allow a logged in
user to overwrite random variables in compose.php with arbitrary data.
This may allow a user to read or write another users preferences or
More information can be found here:
This issue also affects RHEL3
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.