CVE

Id
50665  
CVE No.
CVE-2011-2753  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.  
Phase
Assigned (20110717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
547160 50665 CVE-2011-2753 CONFIRM:http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=revision&revision=14119  View
547161 50665 CVE-2011-2753 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=720694  View
547162 50665 CVE-2011-2753 DEBIAN:DSA-2291  View
547163 50665 CVE-2011-2753 URL:http://www.debian.org/security/2011/dsa-2291  View
547164 50665 CVE-2011-2753 MANDRIVA:MDVSA-2011:123  View
547165 50665 CVE-2011-2753 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:123  View
547166 50665 CVE-2011-2753 REDHAT:RHSA-2012:0103  View
547167 50665 CVE-2011-2753 URL:http://rhn.redhat.com/errata/RHSA-2012-0103.html  View
547168 50665 CVE-2011-2753 XF:squirrelmail-authentication-csrf(68586)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34569 JVNDB-2011-004811 IBM TDS の IDSWebApp における重要な情報を取得される脆弱性 IBM Tivoli Directory Server (TDS) の Web Administration Tool の IDSWebApp は、LDAP サーバのログファイルへのアクセスに認証を要求しないため、重要な情報を取得される脆弱性が存在します。 CVE-2011-2758 50665 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004811.html  View