4.3 - CVE-2009-1578

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2009-1578	First vendor Publication	2009-05-14
Vendor	Cve	Last vendor Modification	2017-09-29

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1578

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11624

Oval ID:	oval:org.mitre.oval:def:11624
Title:	Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).
Description:	Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1578	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND squirrelmail is earlier than 0:1.4.8-13.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND squirrelmail is earlier than 0:1.4.8-5.el4_8.5 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND squirrelmail is earlier than 0:1.4.8-5.el5_3.7

CPE : Common Platform Enumeration

Type	Description	Count
Application	Squirrelmail cpe:2.3:a:squirrelmail:squirrelmail:1.4.9a:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.9:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.8.4fc6:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.8:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.7:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_cvs:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:rc1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4.5_rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:rc1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:rc1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4.3aa:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:r1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:r3:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:rc1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r5:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r4:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.17:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.15rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:rc1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4.13:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.0-r1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc2a:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.4:rc1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.6-rc1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:rc1:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:rc3:::::: cpe:2.3:a:squirrelmail:squirrelmail:1.2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:1.0:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.5:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.4:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.3:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:0.1:::::::* cpe:2.3:a:squirrelmail:squirrelmail:::::::: cpe:2.3:a:squirrelmail:squirrelmail:-:::::::*	101

OpenVAS Exploits

Date	Description
2011-08-09	Name : CentOS Update for squirrelmail CESA-2009:1066 centos3 i386 File : nvt/gb_CESA-2009_1066_squirrelmail_centos3_i386.nasl
2011-08-09	Name : CentOS Update for squirrelmail CESA-2009:1066 centos5 i386 File : nvt/gb_CESA-2009_1066_squirrelmail_centos5_i386.nasl
2010-01-20	Name : Gentoo Security Advisory GLSA 201001-08 (squirrelmail) File : nvt/glsa_201001_08.nasl
2009-06-05	Name : RedHat Security Advisory RHSA-2009:1066 File : nvt/RHSA_2009_1066.nasl
2009-06-05	Name : CentOS Security Advisory CESA-2009:1066 (squirrelmail) File : nvt/ovcesa2009_1066.nasl
2009-06-05	Name : Ubuntu USN-776-2 (kvm) File : nvt/ubuntu_776_2.nasl
2009-05-29	Name : SquirrelMail Command Execution Vulnerability File : nvt/secpod_squirrelmail_cmd_exec_vuln.nasl
2009-05-25	Name : Debian Security Advisory DSA 1802-1 (squirrelmail) File : nvt/deb_1802_1.nasl
2009-05-25	Name : Debian Security Advisory DSA 1802-2 (squirrelmail) File : nvt/deb_1802_2.nasl
2009-05-20	Name : Fedora Core 9 FEDORA-2009-4870 (squirrelmail) File : nvt/fcore_2009_4870.nasl
2009-05-20	Name : Fedora Core 11 FEDORA-2009-4875 (squirrelmail) File : nvt/fcore_2009_4875.nasl
2009-05-20	Name : Fedora Core 10 FEDORA-2009-4880 (squirrelmail) File : nvt/fcore_2009_4880.nasl
2009-05-20	Name : Mandrake Security Advisory MDVSA-2009:110 (squirrelmail) File : nvt/mdksa_2009_110.nasl
2009-05-14	Name : SquirrelMail Prior to 1.4.18 Multiple Vulnerabilities File : nvt/squirrelmail_1_4_18.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
54505	SquirrelMail contrib/decrypt_headers.php Unspecified XSS
54504	SquirrelMail Crafted Link Multiple Unspecified XSS

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2009-1066.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20090526_squirrelmail_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2010-06-15	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_4.nasl - Type : ACT_GATHER_INFO
2010-06-15	Name : The remote host is missing a Mac OS X update that fixes a security issue. File : macosx_SecUpd2010-004.nasl - Type : ACT_GATHER_INFO
2010-02-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201001-08.nasl - Type : ACT_GATHER_INFO
2009-05-28	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2009-1066.nasl - Type : ACT_GATHER_INFO
2009-05-27	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-1066.nasl - Type : ACT_GATHER_INFO
2009-05-20	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1802.nasl - Type : ACT_GATHER_INFO
2009-05-15	Name : The remote webmail application is affected by a cross-site scripting vulnerab... File : squirrelmail_1418.nasl - Type : ACT_ATTACK
2009-05-14	Name : The remote openSUSE host is missing a security update. File : suse_squirrelmail-6242.nasl - Type : ACT_GATHER_INFO
2009-05-13	Name : The remote Fedora host is missing a security update. File : fedora_2009-4870.nasl - Type : ACT_GATHER_INFO
2009-05-13	Name : The remote Fedora host is missing a security update. File : fedora_2009-4875.nasl - Type : ACT_GATHER_INFO
2009-05-13	Name : The remote Fedora host is missing a security update. File : fedora_2009-4880.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
BID	http://www.securityfocus.com/bid/34916
CONFIRM	http://download.gna.org/nasmail/nasmail-1.7.zip http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revi... http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revi... http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-S... http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-S... http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-S... http://support.apple.com/kb/HT4188 http://www.squirrelmail.org/security/issue/2009-05-08 http://www.squirrelmail.org/security/issue/2009-05-09 https://bugzilla.redhat.com/show_bug.cgi?id=500363 https://gna.org/forum/forum.php?forum_id=2146
DEBIAN	http://www.debian.org/security/2009/dsa-1802
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2009:110
OSVDB	http://osvdb.org/60468
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2009-1066.html
SECUNIA	http://secunia.com/advisories/35052 http://secunia.com/advisories/35073 http://secunia.com/advisories/35140 http://secunia.com/advisories/35259 http://secunia.com/advisories/37415 http://secunia.com/advisories/40220
VUPEN	http://www.vupen.com/english/advisories/2009/1296 http://www.vupen.com/english/advisories/2009/3315 http://www.vupen.com/english/advisories/2010/1481
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/50459 https://exchange.xforce.ibmcloud.com/vulnerabilities/50460

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-05 01:05:54	Multiple Updates
2021-05-04 12:09:31	Multiple Updates
2021-04-22 01:09:52	Multiple Updates
2020-05-23 01:40:22	Multiple Updates
2020-05-23 00:23:44	Multiple Updates
2017-09-29 09:24:12	Multiple Updates
2017-08-17 09:22:34	Multiple Updates
2016-06-28 17:41:05	Multiple Updates
2016-04-26 18:48:36	Multiple Updates
2014-02-17 10:49:58	Multiple Updates
2013-05-10 23:50:00	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	1
CPE ID(s)	101
Sources(s)	32
osvdb(s)	2
Openvas Exploit(s)	14
Nessus® Exploit(s)	13

	Related
6.8	RHSA-2009:1066
6.8	MDVSA-2009:110
6.8	GLSA-201001-08
6.8	DSA-1802
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 4 more Alert(s)