CVE-2006-4019: Medium severity Squirrelmail Squirrelmail vulnerability
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4019?
CVE-2006-4019 is considered a critical vulnerability due to its potential to compromise user data and account integrity.
How do I fix CVE-2006-4019?
To fix CVE-2006-4019, upgrade SquirrelMail to version 1.4.8 or later, which addresses this vulnerability.
Which versions of SquirrelMail are affected by CVE-2006-4019?
CVE-2006-4019 affects SquirrelMail versions 1.4.0 to 1.4.7.
What types of attacks can exploit CVE-2006-4019?
CVE-2006-4019 can be exploited by remote attackers to overwrite arbitrary program variables leading to unauthorized access to user attachments and preferences.
Is there a patch available for CVE-2006-4019?
Yes, a patch is available for CVE-2006-4019 that can be applied to the affected versions of SquirrelMail.