CVE-2005-0152: High severity Squirrelmail Squirrelmail vulnerability
Published Feb 2, 2005
·Updated
PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "URL manipulation."
Affected Software
1 affected component
Squirrelmail Squirrelmail=1.2.6
Remediation
Patch Available
Patch Available
Patch Available
Event History
Feb 2, 2005
CVE Published
05:00 AM
Feb 6, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0152?
CVE-2005-0152 has been classified with a critical severity level as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2005-0152?
To fix CVE-2005-0152, update SquirrelMail to a version that is not vulnerable, preferably above 1.2.6.
3
What software is affected by CVE-2005-0152?
CVE-2005-0152 affects SquirrelMail version 1.2.6.
4
What type of attack does CVE-2005-0152 enable?
CVE-2005-0152 enables remote file inclusion attacks that can lead to arbitrary code execution.
5
Is CVE-2005-0152 still a relevant vulnerability today?
While CVE-2005-0152 was disclosed in 2005, it remains relevant for environments still using the vulnerable version of SquirrelMail.