CVE-2006-4169

Related Files

Gentoo Linux Security Advisory 200708-8

Posted Aug 14, 2007

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200708-08 - The functions deletekey(), gpg_check_sign_pgp_mime() and gpg_recv_key() used in the SquirrelMail G/PGP encryption plugin do not properly escape user-supplied data. Versions less than 1.4.10a-r2 are affected.

tags | advisory

systems | linux, gentoo

advisories | CVE-2005-1924, CVE-2006-4169

SHA-256 | 9d078d0dc028f915969339c60ba23959b7a1782720672d619014f929d54005e0

Download | Favorite | View

iDEFENSE Security Advisory 2007-07-11.6

Posted Jul 12, 2007

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 07.11.07 - Remote exploitation of a local file inclusion vulnerability in gpg_help.php in version 2.0 of the SquirrelMail G/PGP Plugin could allow an authenticated webmail user to execute arbitrary PHP code under the security context of the running web server. iDefense has confirmed the existence of this vulnerability in version 2.0 of the G/PGP Encryption Plugin for SquirrelMail. It is suspected that earlier versions of the plug-in are also affected.

tags | advisory, remote, web, arbitrary, local, php, file inclusion

advisories | CVE-2006-4169

SHA-256 | aa231abe3475356daf40107f026dcfd4b8a5dfd5f6082511bfec68f93d1a9a79

Download | Favorite | View