NVD

Id
62677  
Name
CVE-2006-4019  
Description
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-08-11  
Modified Date
2016-10-17  
Seq
2006-4019  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325716 62677 CVE-2006-4019 20061001-01-P  View
325717 62677 CVE-2006-4019 20060811 SquirrelMail issue is dynamic variable evaluation  View
325718 62677 CVE-2006-4019 http://docs.info.apple.com/article.html?artnum=306172  View
325719 62677 CVE-2006-4019 APPLE-SA-2007-07-31  View
325720 62677 CVE-2006-4019 20060811 rPSA-2006-0152-1 squirrelmail  View
325721 62677 CVE-2006-4019 oval:org.mitre.oval:def:11533  View
325722 62677 CVE-2006-4019 1016689  View
325723 62677 CVE-2006-4019 DSA-1154  View
325724 62677 CVE-2006-4019 MDKSA-2006:147  View
325725 62677 CVE-2006-4019 SUSE-SR:2006:023  View
325726 62677 CVE-2006-4019 RHSA-2006:0668  View
325727 62677 CVE-2006-4019 20060811 rPSA-2006-0152-1 squirrelmail  View
325728 62677 CVE-2006-4019 20060811 SquirrelMail 1.4.8 released - fixes variable overwriting attack  View
325729 62677 CVE-2006-4019 19486  View
325730 62677 CVE-2006-4019 25159  View
325731 62677 CVE-2006-4019 http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-full.patch  View
325732 62677 CVE-2006-4019 http://www.squirrelmail.org/security/issue/2006-08-11  View
325733 62677 CVE-2006-4019 ADV-2006-3271  View
325734 62677 CVE-2006-4019 ADV-2007-2732  View
325735 62677 CVE-2006-4019 squirrelmail-compose-variable-overwrite(28365)  View
325736 62677 CVE-2006-4019 https://issues.rpath.com/browse/RPL-577  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58297 JVNDB-2006-000493 SquirrelMail の compose.php における情報漏洩の脆弱性 SquirrelMail の compose.php では、期限切れのセッションに関する処理を行う関数に不備が存在するため、compose.php で使用される変数がランダムに上書きされる脆弱性が存在します。 CVE-2006-4019 20121 CVE-2006-4019 62677 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000493.html 2006-08-11 2007-04-01 View