CVE-2005-0075

Опубликовано: 29 янв. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.

Ссылки

http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
Patch
http://marc.info/?l=bugtraq&m=110702772714662&w=2
http://secunia.com/advisories/13962/
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
http://www.redhat.com/support/errata/RHSA-2005-099.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-135.html
Patch
Vendor Advisory
http://www.squirrelmail.org/security/issue/2005-01-14
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
Patch
http://marc.info/?l=bugtraq&m=110702772714662&w=2
http://secunia.com/advisories/13962/
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
http://www.redhat.com/support/errata/RHSA-2005-099.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-135.html
Patch
Vendor Advisory
http://www.squirrelmail.org/security/issue/2005-01-14
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.0081

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0075

ubuntu

больше 20 лет назад

prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.

CVE-2005-0075

redhat

больше 20 лет назад

prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.

CVE-2005-0075

debian

больше 20 лет назад

prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, ...

GHSA-9f2f-wxmh-4h2q

github

больше 3 лет назад

prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.

EPSS

Процентиль: 73%

0.0081

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other