FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1769

This CVE name corresponds to:

Entered	Topic
2005-06-18	squirrelmail -- Several cross site scripting vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1769 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1769
Phase	Assigned(20050531)

Description

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.

References

Source	Reference
BUGTRAQ	20050616 [SM-ANNOUNCE] Patch fixes SquirrelMail cross site scripting vulnerabilities [CAN-2005-1769]
CONFIRM	http://www.squirrelmail.org/security/issue/2005-06-15
APPLE	APPLE-SA-2005-08-15
APPLE	APPLE-SA-2005-08-17
DEBIAN	DSA-756
FEDORA	FLSA:163047
MANDRAKE	MDKSA-2005:108
REDHAT	RHSA-2005:595
SUSE	SUSE-SR:2005:018
OVAL	oval:org.mitre.oval:def:9852