Detections
Analytics

FreeBSD : squirrelmail -- XSS vulnerability (7fbfe159-3438-11d9-a9e7-0001020eed82)

high Nessus Plugin ID 37822

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

A SquirrelMail Security Notice reports :

There is a cross site scripting issue in the decoding of encoded text in certain headers. SquirrelMail correctly decodes the specially crafted header, but doesn't sanitize the decoded strings.

Solution

Update the affected packages.

See Also

https://marc.info/?l=bugtraq&m=110012133608004

http://www.nessus.org/u?46c6f12e

Plugin Details

Severity: High

ID: 37822

File Name: freebsd_pkg_7fbfe159343811d9a9e70001020eed82.nasl

Version: 1.14

Type: local

Published: 4/23/2009

Updated: 1/6/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:squirrelmail, p-cpe:/a:freebsd:freebsd:ja-squirrelmail

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 11/12/2004

Vulnerability Publication Date: 11/3/2004