SquirrelMail Remote Command Execution Vulnerability
BID:2968
Info
SquirrelMail Remote Command Execution Vulnerability
| Bugtraq ID: | 2968 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-1159 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 02 2001 12:00AM |
| Updated: | Jul 11 2009 06:56AM |
| Credit: | Published in a Secure Reality Security Advisory on July 2, 2001. |
| Vulnerable: |
SquirrelMail SquirrelMail 1.0.5 SquirrelMail SquirrelMail 1.0.4 |
| Not Vulnerable: | |
Discussion
SquirrelMail Remote Command Execution Vulnerability
SquirrelMail is a freely available webmail package written in PHP.
An input validation error exists in SquirrelMail that could enable remote users to execute arbitrary commands on a host running the package.
The problem occurs when certain query values are submitted that cause the authentication mechanisms used by the script to be bypassed, enabling remote users to inject malicious PHP code into user preference files. The code contained in the preference file is executed when a script loads the file.
SquirrelMail is a freely available webmail package written in PHP.
An input validation error exists in SquirrelMail that could enable remote users to execute arbitrary commands on a host running the package.
The problem occurs when certain query values are submitted that cause the authentication mechanisms used by the script to be bypassed, enabling remote users to inject malicious PHP code into user preference files. The code contained in the preference file is executed when a script loads the file.
Exploit / POC
SquirrelMail Remote Command Execution Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
SquirrelMail Remote Command Execution Vulnerability
Solution:
This issue is resolved in versions 1.0.6 and higher of SquirrelMail:
SquirrelMail SquirrelMail 1.0.5
Solution:
This issue is resolved in versions 1.0.6 and higher of SquirrelMail:
SquirrelMail SquirrelMail 1.0.5
-
SquirrelMail SquirrelMail 1.0.6
http://prdownloads.sourceforge.net/squirrelmail/squirrelmail-1.0.6.tar .gz