CVE

Id
27135  
CVE No.
CVE-2007-3778  
Status
Candidate  
Description
The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php. NOTE: a parameter value can be set in the contents of an e-mail message.  
Phase
Assigned (20070715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277724 27135 CVE-2007-3778 IDEFENSE:20070711 SquirrelMail G/PGP Plugin gpg_check_sign_pgp_mime() Command Injection Vulnerability  View
277725 27135 CVE-2007-3778 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=330  View
277726 27135 CVE-2007-3778 MLIST:[dailydave] 20070708 SquirrelMail GPG Plugin vuln  View
277727 27135 CVE-2007-3778 URL:http://lists.immunitysec.com/pipermail/dailydave/2007-July/004452.html  View
277728 27135 CVE-2007-3778 MLIST:[dailydave] 20070709 SquirrelMail GPG Plugin vuln  View
277729 27135 CVE-2007-3778 URL:http://lists.immunitysec.com/pipermail/dailydave/2007-July/004456.html  View
277730 27135 CVE-2007-3778 VIM:20070710 SquirrelMail GPG Plugin Vulnerabilities  View
277731 27135 CVE-2007-3778 URL:http://www.attrition.org/pipermail/vim/2007-July/001704.html  View
277732 27135 CVE-2007-3778 VIM:20070711 True: SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln  View
277733 27135 CVE-2007-3778 URL:http://www.attrition.org/pipermail/vim/2007-July/001710.html  View
277734 27135 CVE-2007-3778 BID:24874  View
277735 27135 CVE-2007-3778 URL:http://www.securityfocus.com/bid/24874  View
277736 27135 CVE-2007-3778 OSVDB:37931  View
277737 27135 CVE-2007-3778 URL:http://osvdb.org/37931  View
277738 27135 CVE-2007-3778 VUPEN:ADV-2007-2513  View
277739 27135 CVE-2007-3778 URL:http://www.vupen.com/english/advisories/2007/2513  View
277740 27135 CVE-2007-3778 SECUNIA:26035  View
277741 27135 CVE-2007-3778 URL:http://secunia.com/advisories/26035  View
277742 27135 CVE-2007-3778 XF:squirrelmail-gpgp-hook-command-execution(35363)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51854 JVNDB-2007-000517 MySQL におけるパスワードパケット処理の不備によるサービス運用妨害 (DoS) の脆弱性 MySQL には、コネクションプロトコルのパスワードパケットの処理に不備があり、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-3780 27135 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000517.html  View