Red Hat Bugzilla – Bug 202196
CVE-2006-4019 Squirrelmail authenticated user variable overwriting
Last modified: 2008-03-09 01:00:18 EST
Squirrelmail authenticated user variable overwriting
A bug was fixed in squirrelmail 1.4.8 which could allow a logged in
user to overwrite random variables in compose.php with arbitrary data.
This may allow a user to read or write another users preferences or
More information can be found here:
squirrelmail-1.4.8-1.fc5 has been pushed for fc5, which should resolve this issue. If these problems are still present in this version, then please make note of it in this bug report.