The remote host is running SquirrelMail, a webmail system written in PHP.

Versions of SquirrelMail prior to 1.4.4 are affected by an email HTML injection issue.  A remote attacker can exploit this flaw to gain access to the users' accounts.

The remote host is affected by the vulnerability described in GLSA-200411-25 (SquirrelMail: Encoded text XSS vulnerability)

    SquirrelMail fails to properly sanitize certain strings when decoding     specially crafted headers.
  Impact :

    By enticing a user to read a specially crafted e-mail, an attacker can     execute arbitrary scripts running in the context of the victim's     browser. This could lead to a compromise of the user's webmail account,     cookie theft, etc.
  Workaround :

    There is no known workaround at this time.

A SquirrelMail Security Advisory reports :

SquirrelMail 1.4.4 has been released to resolve a number of security issues disclosed below. It is strongly recommended that all running SquirrelMail prior to 1.4.4 upgrade to the latest release. Remote File Inclusion Manoel Zaninetti reported an issue in src/webmail.php which would allow a crafted URL to include a remote web page. This was assigned CAN-2005-0103 by the Common Vulnerabilities and Exposures.
Cross Site Scripting Issues A possible cross site scripting issue exists in src/webmail.php that is only accessible when the PHP installation is running with register_globals set to On. This issue was uncovered internally by the SquirrelMail Development team. This isssue was assigned CAN-2005-0104 by the Common Vulnerabilities and Exposures.

A second issue which was resolved in the 1.4.4-rc1 release was uncovered and assigned CAN-2004-1036 by the Common Vulnerabilities and Exposures. This issue could allow a remote user to send a specially crafted header and cause execution of script (such as JavaScript) in the client browser. Local File Inclusion A possible local file inclusion issue was uncovered by one of our developers involving custom preference handlers. This issue is only active if the PHP installation is running with register_globals set to On.

远程主机正在运行 SquirrelMail，这是一个以 PHP 编写的 webmail 系统。

1.4.4 之前的 SquirrelMail 版本受到一个电子邮件 HTML 注入问题的影响。远程攻击者可利用此缺陷获取用户帐户的访问权限。

リモートホストは、PHPで書かれたWebメールシステムであるSquirrelMailを実行しています。

1.4.4より前のバージョンのSquirrelMailは、電子メールのHTMLインジェクションの問題による影響を受けます。リモートの攻撃者がこの欠陥を悪用し、ユーザーのアカウントにアクセスする可能性があります。

An updated SquirrelMail package that fixes a cross-site scripting vulnerability is now available.

SquirrelMail is a webmail package written in PHP.

A cross-site scripting bug has been found in SquirrelMail. This issue could allow an attacker to send a mail with a carefully crafted header, which could result in causing the victim's machine to execute a malicious script. The Common Vulnerabilities and Exposures project has assigned the name CVE-2004-1036 to this issue.

Additionally, the following issues have been addressed :

  - updated splash screens - HIGASHIYAMA Masato's patch to     improve Japanese support - real 1.4.3a tarball -     config_local.php and default_pref in /etc/squirrelmail/     to match upstream RPM.

Please note that it is possible that upgrading to this package may remove your SquirrelMail configuration files due to a bug in the RPM package. Upgrading will prevent this from happening in the future.

Users of SquirrelMail are advised to upgrade to this updated package which contains a patched version of SquirrelMail version 1.43a and is not vulnerable to these issues.

he remote host is missing Security Update 2005-001. This security update contains a number of fixes for the following programs :

  - at commands
  - ColorSync
  - libxml2
  - Mail
  - PHP
  - Safari
  - SquirrelMail

These programs have multiple vulnerabilities which may allow a remote attacker to execute arbitrary code.

遠端主機正在執行 SquirrelMail，這是一個以 PHP 編寫的 Web 郵件系統。

1.4.4 之前的 SquirrelMail 版本受到電子郵件 HTML 注入問題影響。遠端攻擊者可利用此瑕疵來取得使用者帳戶的存取權。

The remote host is missing Security Update 2005-001. This security update contains a number of enhancements for the following programs :

 - at commands
 - ColorSync
 - libxml2
 - Mail
 - PHP
 - Safari
 - SquirrelMail
 

ID	名稱	產品	系列	已發布	已更新	嚴重性
15718	SquirrelMail decodeHeader Arbitrary HTML Injection	Nessus	CGI abuses	2004/11/13	2025/5/14	medium
15736	GLSA-200411-25 : SquirrelMail: Encoded text XSS vulnerability	Nessus	Gentoo Local Security Checks	2004/11/17	2021/1/6	medium
18992	FreeBSD : squirrelmail -- XSS and remote code injection vulnerabilities (79630c0c-8dcc-45d0-9908-4087fe1d618c)	Nessus	FreeBSD Local Security Checks	2005/7/13	2021/1/6	high
15718	SquirrelMail decodeHeader 任意 HTML 注入	Nessus	CGI abuses	2004/11/13	2025/5/14	medium
15718	SquirrelMail decodeHeaderの任意のHTMLインジェクション	Nessus	CGI abuses	2004/11/13	2025/5/14	medium
16053	RHEL 3 : squirrelmail (RHSA-2004:654)	Nessus	Red Hat Local Security Checks	2004/12/27	2021/1/14	medium
16251	Mac OS X Multiple Vulnerabilities (Security Update 2005-001)	Nessus	MacOS X Local Security Checks	2005/1/26	2024/5/28	high
15718	SquirrelMail decodeHeader 任意 HTML 注入	Nessus	CGI abuses	2004/11/13	2025/5/14	medium
2555	Mac OS X Multiple Vulnerabilities (Security Update 2005-001)	Nessus Network Monitor	Web Clients	2005/1/26	2019/3/6	critical
800804	Mac OS X Multiple Vulnerabilities (Security Update 2005-001)	Log Correlation Engine	Operating System Detection			high

偵測

搜尋 Plugin

medium

medium

high

medium

medium

medium

high

medium

critical

high