REDHAT-BUG-502137: High severity squirrelmail vulnerability

Published May 22, 2009

Updated

It was discovered that original upstream patch for server-side command execution flaw affecting setups with mapypalias username map enabled did not address the issue completely, due to incorrect use of quoting (backticks vs. single quotes). Code execution was still possible in upstream version 1.4.18.

Issue was fixed upstream in 1.4.19.

Updated upstream security advisory: http://www.squirrelmail.org/security/issue/2009-05-10

Full upstream patch: http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-14-STABLE/squirrelmail/functions/imapgeneral.php?r1=13549&r2=13733

Affected Software

1 affected component

Squirrelmail Squirrelmail

Event History

May 22, 2009

Data Sourced

via Red Hat·06:41 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-502137?

The vulnerability REDHAT-BUG-502137 is considered critical due to its potential for server-side command execution.

How do I fix REDHAT-BUG-502137?

To fix REDHAT-BUG-502137, update SquirrelMail to the latest version that addresses the quoting issues in the mapping of usernames.

What does REDHAT-BUG-502137 affect?

REDHAT-BUG-502137 affects SquirrelMail setups that have the map_yp_alias username map enabled.

What type of vulnerability is REDHAT-BUG-502137?

REDHAT-BUG-502137 is a server-side command execution vulnerability.

Is there a known exploit for REDHAT-BUG-502137?

Yes, there are known exploits for REDHAT-BUG-502137 due to the improper handling of quoting in the vulnerable code.