CVE-2007-3635: Medium severity Squirrelmail Squirrelmail vulnerability
Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3635?
CVE-2007-3635 is rated as a moderate severity vulnerability due to its potential for local authenticated users to inject commands.
How do I fix CVE-2007-3635?
To mitigate CVE-2007-3635, upgrade to a newer version of SquirrelMail and the GPG Plugin that address these vulnerabilities.
Who is affected by CVE-2007-3635?
CVE-2007-3635 affects users of SquirrelMail version 1.4.10a and the GPG Plugin version 2.0.
What types of vulnerabilities are described in CVE-2007-3635?
CVE-2007-3635 describes multiple unspecified vulnerabilities that allow local authenticated users to potentially execute unauthorized commands.
Is CVE-2007-3635 related to other vulnerabilities?
Yes, CVE-2007-3635 may overlap with other vulnerabilities such as CVE-2005-1924, CVE-2006-4169, and CVE-2007-3634.