[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <200905120943.36957.hanno@hboeck.de>
Date: Tue, 12 May 2009 09:43:36 +0200
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Cc: Steven Christey <coley@...us.mitre.org>
Subject: CVE request: Squirrelmail < 1.4.18 XSS, session fixation, server-side code execution
From squirrelmail.org:
The SquirrelMail Team is pleased to announce the release of SquirrelMail
version 1.4.18. The most notable changes for this version are several
security fixes, including a couple XSS exploits, a session fixation issue,
and an obscure but dangerous server-side code execution hole.
--
Hanno Böck Blog: http://www.hboeck.de/
GPG: 3DBD3B20 Jabber/Mail: hanno@...eck.de
http://ausdenaugenausdemsinn.de - Kein Sicherheitsrabatt für CO2-Speicher
http://tinyurl.com/dceu73 - Internetzensur stoppen!
http://schokokeks.org - professional webhosting
Download attachment "signature.asc " of type "application/pgp-signature" (199 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
