Gravità: : Medio
  Identificatori CVE: CVE-2006-0377
  Data notifica: 21 luglio 2015

  Descrizione

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."

  Informazioni esposizione:

Apply associated Trend Micro DPI Rules.

  Soluzioni

  Trend Micro Deep Security DPI Rule Number: 1000208
  Trend Micro Deep Security DPI Rule Name: 1000208 - SquirrelMail IMAP Command Injection Vulnerability

  Software e versione interessati:

  • SquirrelMail SquirrelMail 1.4
  • SquirrelMail SquirrelMail 1.4-rc1
  • SquirrelMail SquirrelMail 1.4.1
  • SquirrelMail SquirrelMail 1.4.2
  • SquirrelMail SquirrelMail 1.4.3
  • SquirrelMail SquirrelMail 1.4.3-rc1
  • SquirrelMail SquirrelMail 1.4.3a
  • SquirrelMail SquirrelMail 1.4.3r3
  • SquirrelMail SquirrelMail 1.4.4
  • SquirrelMail SquirrelMail 1.4.4-rc1
  • SquirrelMail SquirrelMail 1.4.5
  • SquirrelMail SquirrelMail 1.4.6-rc1