SquirrelMail SquirrelSpell Remote Shell Command Execution Vulnerability

Solution:
The author of SquirrelSpell has released a patch.

Additionally, this issue was addressed in version 0.3.6 of SquirrelSpell, which ships with SquirrelMail 1.2.4. A number of other issues have been addressed in more recent versions of SquirrelSpell and SquirrelMail. Users are advised to upgrade.


SquirrelMail SquirrelSpell 0.3.5


 

Privacy Statement
Copyright 2010, SecurityFocus