CVE-2008-2379: XSS
Published Dec 5, 2008
·Updated
Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message.
Affected Software
66 affected components
Squirrelmail Squirrelmail=1.3.1
Squirrelmail Squirrelmail=1.4.2
Squirrelmail Squirrelmail=0.4
Squirrelmail Squirrelmail=1.4.5_rc1
Squirrelmail Squirrelmail=1.0.6
Squirrelmail Squirrelmail=1.0.5
Squirrelmail Squirrelmail=0.3
Squirrelmail Squirrelmail=0.4pre2
Squirrelmail Squirrelmail=1.1.0
Squirrelmail Squirrelmail=1.4.6_rc1
Squirrelmail Squirrelmail=1.0pre2
Squirrelmail Squirrelmail=0.3.1
Squirrelmail Squirrelmail=0.1.2
Squirrelmail Squirrelmail=1.2.7
Squirrelmail Squirrelmail=1.0.1
Squirrelmail Squirrelmail=0.2.1
Squirrelmail Squirrelmail=1.4.12
Squirrelmail Squirrelmail=1.4.9a
Squirrelmail Squirrelmail=1.4.6
Squirrelmail Squirrelmail=1.2.0
Squirrelmail Squirrelmail=1.4.7
Squirrelmail Squirrelmail=1.4.3_rc1
Squirrelmail Squirrelmail=0.1
Squirrelmail Squirrelmail=1.4.15
Squirrelmail Squirrelmail=1.2.2
Squirrelmail Squirrelmail=0.5pre2
Squirrelmail Squirrelmail=1.1.1
Squirrelmail Squirrelmail=1.4.4_rc1
Squirrelmail Squirrelmail=1.2.0_rc3
Squirrelmail Squirrelmail=1.1.2
Squirrelmail Squirrelmail=1.4.15_rc1
Squirrelmail Squirrelmail=0.3pre2
Squirrelmail Squirrelmail=1.4.3
Squirrelmail Squirrelmail=0.1.1
Squirrelmail Squirrelmail=1.3.2
Squirrelmail Squirrelmail=1.2.1
Squirrelmail Squirrelmail=1.4.1
Squirrelmail Squirrelmail=1.4.9
Squirrelmail Squirrelmail=1.4.0_rc2a
Squirrelmail Squirrelmail=1.4.8
Squirrelmail Squirrelmail=1.4.0_rc1
Squirrelmail Squirrelmail=1.4.0
Squirrelmail Squirrelmail=1.1.3
Squirrelmail Squirrelmail=1.2.4
Squirrelmail Squirrelmail=0.5pre1
Squirrelmail Squirrelmail=1.2.3
Squirrelmail Squirrelmail=1.4.10
Squirrelmail Squirrelmail=1.4.3a
Squirrelmail Squirrelmail=1.0.2
Squirrelmail Squirrelmail=1.0.4
Squirrelmail Squirrelmail=1.0pre1
Squirrelmail Squirrelmail=1.2.6
Squirrelmail Squirrelmail=1.4.10a
Squirrelmail Squirrelmail=1.4.4
Squirrelmail Squirrelmail=0.3pre1
Squirrelmail Squirrelmail<=1.4.16
Squirrelmail Squirrelmail=0.4pre1
Squirrelmail Squirrelmail=1.2.5
Squirrelmail Squirrelmail=1.4.11
Squirrelmail Squirrelmail=1.0.3
Squirrelmail Squirrelmail=1.3.0
Squirrelmail Squirrelmail=1.0
Squirrelmail Squirrelmail=0.2
Squirrelmail Squirrelmail=0.5
Squirrelmail Squirrelmail=1.4.5
Squirrelmail Squirrelmail=1.0pre3
Event History
Dec 5, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2379?
CVE-2008-2379 has a moderate severity rating due to its potential to allow cross-site scripting attacks.
2
How do I fix CVE-2008-2379?
To fix CVE-2008-2379, upgrade SquirrelMail to version 1.4.17 or later.
3
What are the affected versions of SquirrelMail in CVE-2008-2379?
CVE-2008-2379 affects SquirrelMail versions prior to 1.4.17, including all versions from 0.1 up to and including 1.4.16.
4
Can CVE-2008-2379 be exploited remotely?
Yes, CVE-2008-2379 can be exploited remotely by attackers through crafted email messages.
5
What type of vulnerability is CVE-2008-2379?
CVE-2008-2379 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts or HTML.