2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2004-0639" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2004-08-06T04:00:00.000" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-20T23:49:02.650" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable."
} ,
{
"lang" : "es" ,
"value" : "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados en Squirrelmail 1.2.10 y anteriores permiten a atacantes remotos inyectar HTML o script de su elecci\u00f3n mediante (1) la variable $mailer en read_body.php, (2) la variable $senderNames_part en mailbox_display.php, y posiblemente otros vectores,incluyendo (3) la variable $event_text."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 6.8 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : true ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-Other"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EC478ABF-19F8-4195-AA37-23668E2474EC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E3A87C77-5F6E-497D-A6A0-7D68D5E27E33"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A55A98B3-34ED-4A90-BB78-50CB56B1B51F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CC5143ED-D4C5-4830-9C96-0B54D03679CB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9B765AEC-09E9-456C-8B57-09927E55D119"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0AAFC3B0-DCE3-4190-B279-E095C666FA34"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9291A565-0BD6-4B5E-B45F-9DE65AB8159D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B6F53A84-FC66-4963-A728-7285F63D4761"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "69A941FF-423E-49C5-AE1F-FE7ED016CA3D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B34FDB1D-881B-4343-A76E-F23B93A0469A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "052914F8-B52C-4AB4-8F85-68D788B588C9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "617C554F-8E7D-4F8A-AF63-C193934C8215"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "15F11950-A2E4-4F57-BF87-57788B841A21"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "026730B8-3919-4100-8607-C640ADBDD662"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4AD31177-05BB-4623-AED7-765DB7E44E47"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "20247A22-9AB9-4BCE-BF28-350B52FBC62D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B08E51F1-3764-4146-89C1-20B9B8EE1222"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:squirrelmail:squirrelmail:1.5_dev:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "49EA7F58-14C6-4860-B276-46C9FCF91B2E"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=108611554415078&w=2" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.debian.org/security/2004/dsa-535" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/10450" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Exploit" ,
"Patch"
]
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/16285" ,
"source" : "cve@mitre.org"
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=108611554415078&w=2" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.debian.org/security/2004/dsa-535" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/10450" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Exploit" ,
"Patch"
]
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/16285" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
