Description: | Description:
The remote host is missing an update to squirrelmail announced via advisory FEDORA-2006-913.
SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 (with no Javascript) for maximum compatibility across browsers. It has very few requirements and is very easy to configure and install. SquirrelMail has all the functionality you would want from an email client, including strong MIME support, address books, and folder manipulation.
Update Information:
Upstream's 1.4.8 release fixes more bugs and solves CVE-2006-4019 security issue. Fedora's package also contains numerous language specific fixes. See RPM %changelog for more details. * Fri Aug 11 2006 Warren Togami 1.4.8-1 - 1.4.8 release with CVE-2006-4019 and upstream bug fixes * Tue Jul 18 2006 Warren Togami 1.4.7-5 - More JP translation updates (#194598) * Mon Jul 10 2006 Warren Togami 1.4.7-4 - Fix fatal typo in config_local.php (#198306) * Sun Jul 9 2006 Warren Togami 1.4.7-2 - Move sqspell_config.php to /etc and mark it %config(noreplace) (#192236) * Fri Jul 7 2006 Warren Togami 1.4.7-1 - 1.4.7 with CVE-2006-3174 - Reduce patch for body text (#194457) - Better JP translation for Check mail (#196117) * Fri Jun 23 2006 Warren Togami 1.4.6-8 - Japanese zenkaku subject conversion (#196017) - Japanese MSIE garbled download ugly hack (#195639) - Japanese multibyte attachment view text (#195452) - Japanese multibyte attachment body text (#194457) - Do not convert Japanese Help to UTF-8 (#194599) * Wed Jun 7 2006 Warren Togami 1.4.6-7 - CVE-2006-2842 File Inclusion Vulnerability * Mon Jun 5 2006 Warren Togami 1.4.6-6 - buildreq gettext (194169)
Solution: Apply the appropriate updates.
This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2006-913
Risk factor : High
CVSS Score: 7.5
|