CVE-2005-0103: Code Injection
Published Jan 24, 2005
·Updated
PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.
Affected Software
21 affected components
Squirrelmail Squirrelmail=1.4.2
Squirrelmail Squirrelmail=1.0.5
Squirrelmail Squirrelmail=1.2.7
Squirrelmail Squirrelmail=1.2.0
Squirrelmail Squirrelmail=1.2.9
Squirrelmail Squirrelmail=1.4.3_rc1
Squirrelmail Squirrelmail=1.2.2
Squirrelmail Squirrelmail=1.4.3
Squirrelmail Squirrelmail=1.2.1
Squirrelmail Squirrelmail=1.4.1
Squirrelmail Squirrelmail=1.4.0
Squirrelmail Squirrelmail=1.4
Squirrelmail Squirrelmail=1.2.4
Squirrelmail Squirrelmail=1.2.3
Squirrelmail Squirrelmail=1.4.3a
Squirrelmail Squirrelmail=1.0.4
Squirrelmail Squirrelmail=1.2.6
Squirrelmail Squirrelmail=1.2.10
Squirrelmail Squirrelmail=1.2.5
Squirrelmail Squirrelmail=1.2.8
Squirrelmail Squirrelmail=1.2.11
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jan 24, 2005
CVE Published
05:00 AM
Feb 6, 2005
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0103?
CVE-2005-0103 is a high severity vulnerability that allows remote attackers to execute arbitrary PHP code.
2
How do I fix CVE-2005-0103?
To fix CVE-2005-0103, update your SquirrelMail installation to version 1.4.4 or later.
3
What software versions are affected by CVE-2005-0103?
CVE-2005-0103 affects SquirrelMail versions before 1.4.4, including 1.4.2, 1.4.3 RC1, and several 1.2.x versions.
4
Is CVE-2005-0103 an example of Remote File Inclusion?
Yes, CVE-2005-0103 is a remote file inclusion vulnerability that occurs through a vulnerable URL parameter.
5
What types of attacks can exploit CVE-2005-0103?
Exploitation of CVE-2005-0103 can lead to unauthorized code execution on the server.