Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Fedora Local Security Checks >> Fedora Core 3 2004-472: squirrelmail


Vulnerability Assessment Details

Fedora Core 3 2004-472: squirrelmail

Vulnerability Assessment Summary
Check for the version of the squirrelmail package

Detailed Explanation for this Vulnerability Assessment

The remote host is missing the patch for the advisory FEDORA-2004-472 (squirrelmail).

SquirrelMail is a standards-based webmail package written in PHP4. It
includes built-in pure PHP support for the IMAP and SMTP protocols,
and
all pages render in pure HTML 4.0 (with no Javascript) for maximum
compatibility across browsers. It has very few requirements and is
very
easy to configure and install. SquirrelMail has all the functionality
you would want from an email client, including strong MIME support,
address books, and folder manipulation.


* Fri Nov 19 2004 Warren Togami 1.4.3a-6.FC3
- FC3

* Fri Nov 19 2004 Warren Togami 1.4.3a-7
- CVE-2004-1036 Cross Site Scripting in encoded text
- #112769 updated splash screens



Solution : http://www.fedoranews.org/blog/index.php?p=112
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

IBM AC Adapter Power Supply 02K7085 02K7086 16V 7.5A 120W Thinkpad G40 G41
$1.7
IBM AC Adapter Power Supply 02K7085 02K7086 16V 7.5A 120W Thinkpad G40 G41 picture IBM SYSTEM X 1.2TB SAS 10K 6Gb 2.5" HARD Drive 00AJ146 00AJ150 00AJ147
$141.68
 IBM SYSTEM X 1.2TB SAS 10K 6Gb 2.5Genuine Lenovo 120W 19.5V 6.15A AC Power Adapter Charger SA10A33631 54Y8916
$24.89
Genuine Lenovo 120W 19.5V 6.15A AC Power Adapter Charger SA10A33631 54Y8916 pictureGenuine Lenovo PA-1650-52LC 65W 19V 3.42A AC Power Adapter Charger 36001678
$16.95
Genuine Lenovo PA-1650-52LC 65W 19V 3.42A AC Power Adapter Charger 36001678 picture


Discussions

No Discussions have been posted on this vulnerability.