Squirrelmail Multiple Remote Vulnerabilities
BID:7952
Info
Squirrelmail Multiple Remote Vulnerabilities
| Bugtraq ID: | 7952 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2003 12:00AM |
| Updated: | Jun 17 2003 12:00AM |
| Credit: | The discovery of these vulnerabilities has been credited to dr_insane. |
| Vulnerable: |
SquirrelMail SquirrelMail 1.2.11 |
| Not Vulnerable: | |
Discussion
Squirrelmail Multiple Remote Vulnerabilities
Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation.
The problems appear to occur due to insufficient sanitization of URI parameters submitted within HTTP requests.
*** It has been discovered that all information disclosure and data corruption issues are in fact not vulnerabilities. The issue lies in the default IMAP configuration, allowing a remote authenticated user to specify their local mailbox file. This behaviour is clearly specified in the IMAP FAQ.
All actions carried out by an authenticated user are done with their own local system privileges, effectively having no affect on the system. This information has been confirmed by the vendor.
It should also be noted that the vendor has announced that the privilege elevation issue is indeed legitimate. In the future this BID will be re-used to cover that vulnerability alone.
Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation.
The problems appear to occur due to insufficient sanitization of URI parameters submitted within HTTP requests.
*** It has been discovered that all information disclosure and data corruption issues are in fact not vulnerabilities. The issue lies in the default IMAP configuration, allowing a remote authenticated user to specify their local mailbox file. This behaviour is clearly specified in the IMAP FAQ.
All actions carried out by an authenticated user are done with their own local system privileges, effectively having no affect on the system. This information has been confirmed by the vendor.
It should also be noted that the vendor has announced that the privilege elevation issue is indeed legitimate. In the future this BID will be re-used to cover that vulnerability alone.
References
Squirrelmail Multiple Remote Vulnerabilities
References:
References:
- XMB Homepage (XMB)
- Invalid SquirrelMail Exploit (Jonathan Angliss
- Re: Invalid SquirrelMail Exploit (3APA3A <[email protected]>)