Secunia Security Advisory - Fedora has issued an update for squirrelmail. This fixes multiple vulnerabilities, which can be exploited by malicious users to manipulate certain information and by malicious people to conduct cross-site scripting attacks.
3250982f2da58a571ae94e71436f87245f6f17617bd7f1f5ffdea39a1470a0e6
TITLE:
Fedora update for squirrelmail
SECUNIA ADVISORY ID:
SA19131
VERIFY ADVISORY:
http://secunia.com/advisories/19131/
CRITICAL:
Less critical
IMPACT:
Cross Site Scripting, Manipulation of data
WHERE:
>From remote
OPERATING SYSTEM:
Fedora Core 4
http://secunia.com/product/5251/
DESCRIPTION:
Fedora has issued an update for squirrelmail. This fixes multiple
vulnerabilities, which can be exploited by malicious users to
manipulate certain information and by malicious people to conduct
cross-site scripting attacks.
For more information:
SA18985
SOLUTION:
Apply updated packages.
Fedora Core 4:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
7fa03570698b636dcd976d0f3b6d3d51df171224
SRPMS/squirrelmail-1.4.6-1.fc4.src.rpm
9cb6adf3a5746a0187ca0f7db333884221ef7512
ppc/squirrelmail-1.4.6-1.fc4.noarch.rpm
9cb6adf3a5746a0187ca0f7db333884221ef7512
x86_64/squirrelmail-1.4.6-1.fc4.noarch.rpm
9cb6adf3a5746a0187ca0f7db333884221ef7512
i386/squirrelmail-1.4.6-1.fc4.noarch.rpm
OTHER REFERENCES:
SA18985:
http://secunia.com/advisories/18985/
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------