CVE

Id
33780  
CVE No.
CVE-2008-3663  
Status
Candidate  
Description
Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.  
Phase
Assigned (20080812)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368456 33780 CVE-2008-3663 BUGTRAQ:20080922 Squirrelmail: Session hijacking vulnerability, CVE-2008-3663  View
368457 33780 CVE-2008-3663 URL:http://www.securityfocus.com/archive/1/archive/1/496601/100/0/threaded  View
368458 33780 CVE-2008-3663 MISC:http://int21.de/cve/CVE-2008-3663-squirrelmail.html  View
368459 33780 CVE-2008-3663 CONFIRM:http://www.nabble.com/ANNOUNCE:-SquirrelMail-1.4.16-Released-td19711998.html  View
368460 33780 CVE-2008-3663 CONFIRM:http://support.apple.com/kb/HT3438  View
368461 33780 CVE-2008-3663 APPLE:APPLE-SA-2009-02-12  View
368462 33780 CVE-2008-3663 URL:http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html  View
368463 33780 CVE-2008-3663 SUSE:SUSE-SR:2008:028  View
368464 33780 CVE-2008-3663 URL:http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html  View
368465 33780 CVE-2008-3663 SUSE:SUSE-SR:2009:004  View
368466 33780 CVE-2008-3663 URL:http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html  View
368467 33780 CVE-2008-3663 BID:31321  View
368468 33780 CVE-2008-3663 URL:http://www.securityfocus.com/bid/31321  View
368469 33780 CVE-2008-3663 OVAL:oval:org.mitre.oval:def:10548  View
368470 33780 CVE-2008-3663 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10548  View
368471 33780 CVE-2008-3663 SECUNIA:33937  View
368472 33780 CVE-2008-3663 URL:http://secunia.com/advisories/33937  View
368473 33780 CVE-2008-3663 SREASON:4304  View
368474 33780 CVE-2008-3663 URL:http://securityreason.com/securityalert/4304  View
368475 33780 CVE-2008-3663 XF:squirrelmail-cookie-session-hijacking(45700)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49445 JVNDB-2008-004755 Maxthon Browser におけるスタックベースのバッファオーバーフローの脆弱性 Maxthon Browser には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3667 33780 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004755.html  View