Welcome to our website
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
Squirrelmail Update for Debian
Posted by philipp on: 01/02/2003 10:13 PM [ Print | 0 comment(s) ]
A new squirrelmail security update for Debian GNU/Linux has been released
A cross site scripting vulnerability has been discovered in squirrelmail, a feature-rich webmail package written in PHP4. Squirrelmail doesn't sanitize user provided variables in all places, leaving it vulnerable to a cross site scripting attack.
For the current stable distribution (woody) this problem has been fixed in version 1.2.6-1.3. The old stable distribution (potato) is not affected since it doesn't contain a squirrelmail package.
An updated package for the current unstable distribution (sid) is expected soon.
For the current stable distribution (woody) this problem has been fixed in version 1.2.6-1.3. The old stable distribution (potato) is not affected since it doesn't contain a squirrelmail package.
An updated package for the current unstable distribution (sid) is expected soon.
Read more
Related Threads
04/27/2005 08:21 AM: squirrelmail problem (0) by matrix3000k