CVE-2002-1650: High severity Squirrelmail Squirrelmail vulnerability
Published Dec 31, 2002
·Updated
The spell checker plugin (checkme.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspellcommand parameter.
Affected Software
1 affected component
Squirrelmail Squirrelmail=1.2.2
Remediation
Event History
Dec 31, 2002
CVE Published
05:00 AM
Mar 28, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1650?
CVE-2002-1650 is rated as a critical vulnerability due to the potential for remote command execution.
2
How do I fix CVE-2002-1650?
To fix CVE-2002-1650, upgrade your SquirrelMail installation to version 1.2.3 or later.
3
What types of attacks can be executed through CVE-2002-1650?
CVE-2002-1650 allows remote attackers to execute arbitrary commands on the server.
4
Which versions of SquirrelMail are affected by CVE-2002-1650?
CVE-2002-1650 affects SquirrelMail versions prior to 1.2.3, specifically version 1.2.2.
5
What component of SquirrelMail is vulnerable in CVE-2002-1650?
The vulnerability in CVE-2002-1650 resides in the spell checker plugin (check_me.mod.php) of SquirrelMail.