CVE

Id
13301  
CVE No.
CVE-2005-2095  
Status
Candidate  
Description
options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.  
Phase
Assigned (20050630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
96034 13301 CVE-2005-2095 BUGTRAQ:20050714 SquirrelMail Arbitrary Variable Overwriting Vulnerability  View
96035 13301 CVE-2005-2095 URL:http://www.securityfocus.com/archive/1/405202  View
96036 13301 CVE-2005-2095 BUGTRAQ:20050714 [SM-ANNOUNCE] Patch available for CAN-2005-2095  View
96037 13301 CVE-2005-2095 URL:http://www.securityfocus.com/archive/1/405200  View
96038 13301 CVE-2005-2095 MISC:http://www.gulftech.org/?node=research&article_id=00090-07142005  View
96039 13301 CVE-2005-2095 CONFIRM:http://www.squirrelmail.org/security/issue/2005-07-13  View
96040 13301 CVE-2005-2095 APPLE:APPLE-SA-2005-08-15  View
96041 13301 CVE-2005-2095 URL:http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html  View
96042 13301 CVE-2005-2095 APPLE:APPLE-SA-2005-08-17  View
96043 13301 CVE-2005-2095 URL:http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html  View
96044 13301 CVE-2005-2095 DEBIAN:DSA-756  View
96045 13301 CVE-2005-2095 URL:http://www.debian.org/security/2005/dsa-756  View
96046 13301 CVE-2005-2095 FEDORA:FLSA:163047  View
96047 13301 CVE-2005-2095 URL:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163047  View
96048 13301 CVE-2005-2095 REDHAT:RHSA-2005:595  View
96049 13301 CVE-2005-2095 URL:http://www.redhat.com/support/errata/RHSA-2005-595.html  View
96050 13301 CVE-2005-2095 SUSE:SUSE-SR:2005:018  View
96051 13301 CVE-2005-2095 URL:http://www.novell.com/linux/security/advisories/2005_18_sr.html  View
96052 13301 CVE-2005-2095 BID:14254  View
96053 13301 CVE-2005-2095 URL:http://www.securityfocus.com/bid/14254  View
96054 13301 CVE-2005-2095 OVAL:oval:org.mitre.oval:def:10500  View
96055 13301 CVE-2005-2095 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10500  View
96056 13301 CVE-2005-2095 XF:squirrelmail-set-post-variable(21359)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62275 JVNDB-2005-000477 Xpdf の loca テーブルの処理におけるサービス運用妨害 (DoS) の脆弱性 Xpdf には、埋め込み TrueType フォント用の Glyph 情報を含む loca テーブルの検証処理に不備があり、テーブルの破損が検出された場合、/tmp ディレクトリのディスクスペースを大量に消費してしまう脆弱性が存在します。 CVE-2005-2097 13301 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000477.html  View