CVE-2009-1580: Medium severity Squirrelmail Squirrelmail vulnerability
From SquirrelMail vulnerability report:
An issue was fixed that allowed an attacker to possibly steal user data by hijacking the SquirrelMail login session.
Credits: Tomas Hoger
Patch: http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13676
Other sources
Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1580?
CVE-2009-1580 has been classified with a medium level of severity due to its potential for session hijacking.
How do I fix CVE-2009-1580?
To fix CVE-2009-1580, upgrade to the latest version of SquirrelMail that addresses this vulnerability.
What versions of SquirrelMail are affected by CVE-2009-1580?
CVE-2009-1580 affects SquirrelMail versions 0.1 to 1.4.17.
What type of vulnerability is CVE-2009-1580?
CVE-2009-1580 is a session hijacking vulnerability that could allow attackers to steal user data.
Who reported the CVE-2009-1580 vulnerability?
The vulnerability CVE-2009-1580 was reported by Tomas Hoger.