2017-10-16 12:31:07 -04:00
{
2019-03-18 00:58:02 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org" ,
"ID" : "CVE-2009-1578" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 00:58:02 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING)."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "APPLE-SA-2010-06-15-1" ,
"refsource" : "APPLE" ,
"url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html"
} ,
{
"name" : "https://gna.org/forum/forum.php?forum_id=2146" ,
"refsource" : "CONFIRM" ,
"url" : "https://gna.org/forum/forum.php?forum_id=2146"
} ,
{
"name" : "MDVSA-2009:110" ,
"refsource" : "MANDRIVA" ,
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:110"
} ,
{
"name" : "34916" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/34916"
} ,
{
"name" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog" ,
"refsource" : "CONFIRM" ,
"url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog"
} ,
{
"name" : "ADV-2010-1481" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2010/1481"
} ,
{
"name" : "http://www.squirrelmail.org/security/issue/2009-05-09" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.squirrelmail.org/security/issue/2009-05-09"
} ,
{
"name" : "FEDORA-2009-4870" ,
"refsource" : "FEDORA" ,
"url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html"
} ,
{
"name" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670" ,
"refsource" : "CONFIRM" ,
"url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670"
} ,
{
"name" : "35140" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/35140"
} ,
{
"name" : "http://download.gna.org/nasmail/nasmail-1.7.zip" ,
"refsource" : "CONFIRM" ,
"url" : "http://download.gna.org/nasmail/nasmail-1.7.zip"
} ,
{
"name" : "60468" ,
"refsource" : "OSVDB" ,
"url" : "http://osvdb.org/60468"
} ,
{
"name" : "FEDORA-2009-4880" ,
"refsource" : "FEDORA" ,
"url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html"
} ,
{
"name" : "oval:org.mitre.oval:def:11624" ,
"refsource" : "OVAL" ,
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11624"
} ,
{
"name" : "http://support.apple.com/kb/HT4188" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.apple.com/kb/HT4188"
} ,
{
"name" : "squirrelmail-phpself-xss(50459)" ,
"refsource" : "XF" ,
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50459"
} ,
{
"name" : "40220" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/40220"
} ,
{
"name" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672" ,
"refsource" : "CONFIRM" ,
"url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672"
} ,
{
"name" : "ADV-2009-1296" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2009/1296"
} ,
{
"name" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672" ,
"refsource" : "CONFIRM" ,
"url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672"
} ,
{
"name" : "35259" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/35259"
} ,
{
"name" : "35052" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/35052"
} ,
{
"name" : "squirrelmail-decryptheaders-xss(50460)" ,
"refsource" : "XF" ,
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/50460"
} ,
{
"name" : "FEDORA-2009-4875" ,
"refsource" : "FEDORA" ,
"url" : "https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html"
} ,
{
"name" : "RHSA-2009:1066" ,
"refsource" : "REDHAT" ,
"url" : "http://www.redhat.com/support/errata/RHSA-2009-1066.html"
} ,
{
"name" : "37415" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/37415"
} ,
{
"name" : "35073" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/35073"
} ,
{
"name" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670" ,
"refsource" : "CONFIRM" ,
"url" : "http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670"
} ,
{
"name" : "http://www.squirrelmail.org/security/issue/2009-05-08" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.squirrelmail.org/security/issue/2009-05-08"
} ,
{
"name" : "ADV-2009-3315" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2009/3315"
} ,
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=500363" ,
"refsource" : "CONFIRM" ,
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=500363"
} ,
{
"name" : "DSA-1802" ,
"refsource" : "DEBIAN" ,
"url" : "http://www.debian.org/security/2009/dsa-1802"
}
]
}
}
