• info
• discussion
• exploit
• solution
• references

SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability

Solution:
Fixes are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 ia-32

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 arm

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 hppa

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 sparc

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 s/390

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 powerpc

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 alpha

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 m68k

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 mipsel

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 ia-64

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb

Debian Linux 4.0 mips

• Debian squirrelmail_1.4.9a-3_all.deb
  http://security.debian.org/pool/updates/main/s/squirrelmail/squirrelma il_1.4.9a-3_all.deb