CVE-2004-0521

SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.
References
Link Resource
ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858
http://marc.info/?l=squirrelmail-cvs&m=108309375029888
http://marc.info/?l=squirrelmail-cvs&m=108532891231712
http://rhn.redhat.com/errata/RHSA-2004-240.html
http://secunia.com/advisories/11685
http://secunia.com/advisories/11686
http://secunia.com/advisories/11870
http://secunia.com/advisories/12289
http://security.gentoo.org/glsa/glsa-200405-16.xml Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-212.shtml
http://www.debian.org/security/2004/dsa-535
http://www.osvdb.org/6841
http://www.securityfocus.com/advisories/6827
http://www.securityfocus.com/advisories/7148
http://www.securityfocus.com/bid/10397 Patch Vendor Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=1733
https://exchange.xforce.ibmcloud.com/vulnerabilities/16235
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446
ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858
http://marc.info/?l=squirrelmail-cvs&m=108309375029888
http://marc.info/?l=squirrelmail-cvs&m=108532891231712
http://rhn.redhat.com/errata/RHSA-2004-240.html
http://secunia.com/advisories/11685
http://secunia.com/advisories/11686
http://secunia.com/advisories/11870
http://secunia.com/advisories/12289
http://security.gentoo.org/glsa/glsa-200405-16.xml Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-212.shtml
http://www.debian.org/security/2004/dsa-535
http://www.osvdb.org/6841
http://www.securityfocus.com/advisories/6827
http://www.securityfocus.com/advisories/7148
http://www.securityfocus.com/bid/10397 Patch Vendor Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=1733
https://exchange.xforce.ibmcloud.com/vulnerabilities/16235
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*

History

20 Nov 2024, 23:48

Type Values Removed Values Added
References () ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - () ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc -
References () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 - () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 -
References () http://marc.info/?l=squirrelmail-cvs&m=108309375029888 - () http://marc.info/?l=squirrelmail-cvs&m=108309375029888 -
References () http://marc.info/?l=squirrelmail-cvs&m=108532891231712 - () http://marc.info/?l=squirrelmail-cvs&m=108532891231712 -
References () http://rhn.redhat.com/errata/RHSA-2004-240.html - () http://rhn.redhat.com/errata/RHSA-2004-240.html -
References () http://secunia.com/advisories/11685 - () http://secunia.com/advisories/11685 -
References () http://secunia.com/advisories/11686 - () http://secunia.com/advisories/11686 -
References () http://secunia.com/advisories/11870 - () http://secunia.com/advisories/11870 -
References () http://secunia.com/advisories/12289 - () http://secunia.com/advisories/12289 -
References () http://security.gentoo.org/glsa/glsa-200405-16.xml - Vendor Advisory () http://security.gentoo.org/glsa/glsa-200405-16.xml - Vendor Advisory
References () http://www.ciac.org/ciac/bulletins/o-212.shtml - () http://www.ciac.org/ciac/bulletins/o-212.shtml -
References () http://www.debian.org/security/2004/dsa-535 - () http://www.debian.org/security/2004/dsa-535 -
References () http://www.osvdb.org/6841 - () http://www.osvdb.org/6841 -
References () http://www.securityfocus.com/advisories/6827 - () http://www.securityfocus.com/advisories/6827 -
References () http://www.securityfocus.com/advisories/7148 - () http://www.securityfocus.com/advisories/7148 -
References () http://www.securityfocus.com/bid/10397 - Patch, Vendor Advisory () http://www.securityfocus.com/bid/10397 - Patch, Vendor Advisory
References () https://bugzilla.fedora.us/show_bug.cgi?id=1733 - () https://bugzilla.fedora.us/show_bug.cgi?id=1733 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/16235 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/16235 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446 -

Information

Published : 2004-08-18 04:00

Updated : 2024-11-20 23:48


NVD link : CVE-2004-0521

Mitre link : CVE-2004-0521

CVE.ORG link : CVE-2004-0521


JSON object : View

Products Affected

sgi

  • propack

squirrelmail

  • squirrelmail