| Description: | Description:
The remote host is missing an update to squirrelmail
announced via advisory FEDORA-2007-088.
SquirrelMail is a standards-based webmail package written in PHP4. It
includes built-in pure PHP support for the IMAP and SMTP protocols, and
all pages render in pure HTML 4.0 (with no Javascript) for maximum
compatibility across browsers. It has very few requirements and is very
easy to configure and install. SquirrelMail has all the functionality
you would want from an email client, including strong MIME support,
address books, and folder manipulation.
Update Information:
http://squirrelmail.org/security/issue/2006-12-02
CVE-2006-6142
Cross site scripting in compose, draft & HTML mail viewing
http://squirrelmail.org/security/issue/2006-12-03
Workaround for Internet Explorer MIME handling
* Mon Jan 15 2007 Warren Togami 1.4.8-3
- CVE-2006-6142
* Tue Aug 15 2006 Warren Togami 1.4.8-2
- more Japanese filename fixes (#195639)
* Fri Aug 11 2006 Warren Togami 1.4.8-1
- 1.4.8 release with CVE-2006-4019 and upstream bug fixes
* Tue Jul 18 2006 Warren Togami 1.4.7-5
- More JP translation updates (#194598)
* Mon Jul 10 2006 Warren Togami 1.4.7-4
- Fix fatal typo in config_local.php (#198306)
* Sun Jul 9 2006 Warren Togami 1.4.7-2
- Move sqspell_config.php to /etc and mark it %config(noreplace) (#192236)
* Fri Jul 7 2006 Warren Togami 1.4.7-1
- 1.4.7 with CVE-2006-3174
- Reduce patch for body text (#194457)
- Better JP translation for Check mail (#196117)
* Fri Jun 23 2006 Warren Togami 1.4.6-8
- Japanese zenkaku subject conversion (#196017)
- Japanese MSIE garbled download ugly hack (#195639)
- Japanese multibyte attachment view text (#195452)
- Japanese multibyte attachment body text (#194457)
- Do not convert Japanese Help to UTF-8 (#194599)
* Wed Jun 7 2006 Warren Togami 1.4.6-7
- CVE-2006-2842 File Inclusion Vulnerability
* Mon Jun 5 2006 Warren Togami 1.4.6-6
- buildreq gettext (194169)
Solution: Apply the appropriate updates.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-088
Risk factor : High
CVSS Score:
7.5
|
