REDHAT-BUG-500360: High severity squirrelmail vulnerability
From SquirrelMail vulnerability report:
An issue was fixed that allowed arbitrary server-side code execution when SquirrelMail was configured to use the example "mapypalias" username mapping functionality.
Credits: Niels Teusink
Updated upstream patch (2009-05-21): http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-14-STABLE/squirrelmail/functions/imapgeneral.php?r1=13549&r2=13733&view=patch
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-500360?
The severity of REDHAT-BUG-500360 is categorized as high due to the potential for arbitrary server-side code execution.
How do I fix REDHAT-BUG-500360?
To fix REDHAT-BUG-500360, upgrade SquirrelMail to version 1.4.21 or later to ensure the vulnerability is patched.
What systems are affected by REDHAT-BUG-500360?
REDHAT-BUG-500360 affects SquirrelMail versions prior to 1.4.21 when configured to use the 'map_yp_alias' username mapping functionality.
What is the nature of the vulnerability in REDHAT-BUG-500360?
The vulnerability in REDHAT-BUG-500360 allows for the execution of arbitrary server-side code, posing a significant security risk.
Who is credited with discovering the vulnerability REDHAT-BUG-500360?
The vulnerability REDHAT-BUG-500360 was reported by Niels Teusink.