SquirrelMail Search.PHP Cross-Site Scripting Vulnerability
BID:18700
CVE-2006-3174 |Info
SquirrelMail Search.PHP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 18700 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-3174 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 28 2006 12:00AM |
| Updated: | Aug 01 2007 10:55PM |
| Credit: | Alec Berryman is credited with the discovery of this vulnerability. |
| Vulnerable: |
SquirrelMail SquirrelMail 1.5.1 SquirrelMail SquirrelMail 1.5 Development Version SquirrelMail SquirrelMail 1.4.8 SquirrelMail SquirrelMail 1.4.7 SquirrelMail SquirrelMail 1.4.6 -rc1 SquirrelMail SquirrelMail 1.4.6 -cvs SquirrelMail SquirrelMail 1.4.6 SquirrelMail SquirrelMail 1.4.5 SquirrelMail SquirrelMail 1.4.4 RC1 SquirrelMail SquirrelMail 1.4.4 SquirrelMail SquirrelMail 1.4.3 RC1 SquirrelMail SquirrelMail 1.4.3 r3 SquirrelMail SquirrelMail 1.4.3 a SquirrelMail SquirrelMail 1.4.3 SquirrelMail SquirrelMail 1.4.2 SquirrelMail SquirrelMail 1.4.1 SquirrelMail SquirrelMail 1.4 RC1 SquirrelMail SquirrelMail 1.4 SquirrelMail SquirrelMail 1.2.11 SquirrelMail SquirrelMail 1.2.10 SquirrelMail SquirrelMail 1.2.9 SquirrelMail SquirrelMail 1.2.8 SquirrelMail SquirrelMail 1.2.7 SquirrelMail SquirrelMail 1.2.6 SquirrelMail SquirrelMail 1.2.5 SquirrelMail SquirrelMail 1.2.4 SquirrelMail SquirrelMail 1.2.3 SquirrelMail SquirrelMail 1.2.2 SquirrelMail SquirrelMail 1.2.1 SquirrelMail SquirrelMail 1.2 .0 SquirrelMail SquirrelMail 1.0.5 SquirrelMail SquirrelMail 1.0.4 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 |
| Not Vulnerable: | |
Discussion
SquirrelMail Search.PHP Cross-Site Scripting Vulnerability
SquirrelMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
SquirrelMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
SquirrelMail Search.PHP Cross-Site Scripting Vulnerability
Attackers can exploit this issue by enticing a victim user into following a malicious URI.
Attackers can exploit this issue by enticing a victim user into following a malicious URI.
Solution / Fix
SquirrelMail Search.PHP Cross-Site Scripting Vulnerability
Solution:
Please see the referenced advisories for more information.
MandrakeSoft Corporate Server 3.0
Solution:
Please see the referenced advisories for more information.
MandrakeSoft Corporate Server 3.0
-
Mandriva squirrelmail-1.4.5-1.4.C30mdk.noarch.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads -
Mandriva squirrelmail-poutils-1.4.5-1.4.C30mdk.noarch
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads -
Mandriva squirrelmail-poutils-1.4.5-1.4.C30mdk.noarch.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
References
SquirrelMail Search.PHP Cross-Site Scripting Vulnerability
References:
References:
- squirrelmail: CVE-2006-3174: cross-site scripting in search.php (Alec Berryman
- Vendor Homepage (SquirrelMail)