----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
SqWebMail HTML Emails Script Insertion Vulnerability

SECUNIA ADVISORY ID:
SA16600

VERIFY ADVISORY:
http://secunia.com/advisories/16600/

CRITICAL:
Moderately critical

IMPACT:
Cross Site Scripting

WHERE:
>From remote

SOFTWARE:
SqWebMail 3.x
http://secunia.com/product/2553/
SqWebMail 4.x
http://secunia.com/product/3601/
SqWebMail 5.x
http://secunia.com/product/4989/

DESCRIPTION:
Secunia Research has discovered a vulnerability in SqWebMail, which
can be exploited by malicious people to conduct script insertion
attacks.

The vulnerability is caused due to SqWebMail failing to properly
sanitise HTML emails. This can be exploited to include arbitrary
script code in HTML emails, which will be executed in context of the
SqWebMail server, as soon as the user views a received email.

Example:
<img src="cid:>" onError="alert(document.domain);">

Successful exploitation allows execution of arbitrary script code and
makes it possible for a malicious person to perform the same actions
as the user of the webmail account (e.g. sending or viewing emails).

The vulnerability has been confirmed in version 5.0.4. Prior version
may also be affected.

SOLUTION:
The vendor has issued an updated version of SqWebMail, which fixes
this vulnerability.
http://www.courier-mta.org/?download.php

PROVIDED AND/OR DISCOVERED BY:
Jakob Balle, Secunia Research.

ORIGINAL ADVISORY:
Secunia Research:
http://secunia.com/secunia_research/2005-39/advisory/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------