Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-1637 | First vendor Publication | 2010-06-22 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | |||
|---|---|---|---|
| Overall CVSS Score | 6.5 | ||
| Base Score | 6.5 | Environmental Score | 6.5 |
| impact SubScore | 3.6 | Temporal Score | 6.5 |
| Exploitabality Sub Score | 2.8 | ||
| Attack Vector | Network | Attack Complexity | Low |
| Privileges Required | Low | User Interaction | None |
| Scope | Unchanged | Confidentiality Impact | High |
| Integrity Impact | None | Availability Impact | None |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:S/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 4 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1637 |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-07-30 | Name : CentOS Update for squirrelmail CESA-2012:0103 centos4 File : nvt/gb_CESA-2012_0103_squirrelmail_centos4.nasl |
| 2012-07-30 | Name : CentOS Update for squirrelmail CESA-2012:0103 centos5 File : nvt/gb_CESA-2012_0103_squirrelmail_centos5.nasl |
| 2012-02-13 | Name : RedHat Update for squirrelmail RHSA-2012:0103-01 File : nvt/gb_RHSA-2012_0103-01_squirrelmail.nasl |
| 2012-02-06 | Name : Mac OS X Multiple Vulnerabilities (2012-001) File : nvt/gb_macosx_su12-001.nasl |
| 2010-08-13 | Name : Fedora Update for squirrelmail FEDORA-2010-11410 File : nvt/gb_fedora_2010_11410_squirrelmail_fc12.nasl |
| 2010-08-13 | Name : Fedora Update for squirrelmail FEDORA-2010-11422 File : nvt/gb_fedora_2010_11422_squirrelmail_fc13.nasl |
| 2010-06-25 | Name : Fedora Update for squirrelmail FEDORA-2010-10244 File : nvt/gb_fedora_2010_10244_squirrelmail_fc12.nasl |
| 2010-06-25 | Name : Fedora Update for squirrelmail FEDORA-2010-10259 File : nvt/gb_fedora_2010_10259_squirrelmail_fc13.nasl |
| 2010-06-25 | Name : Fedora Update for squirrelmail FEDORA-2010-10264 File : nvt/gb_fedora_2010_10264_squirrelmail_fc11.nasl |
| 2010-06-25 | Name : Mandriva Update for squirrelmail MDVSA-2010:120 (squirrelmail) File : nvt/gb_mandriva_MDVSA_2010_120.nasl |
| 2010-06-22 | Name : SquirrelMail 'mail_fetch' Remote Information Disclosure Vulnerability File : nvt/gb_SquirrelMail_40291.nasl |
| 2010-04-19 | Name : Mandriva Update for openoffice.org-voikko MDVA-2010:120 (openoffice.org-voikko) File : nvt/gb_mandriva_MDVA_2010_120.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 65696 | SquirrelMail Mail Fetch Plugin Modified POP3 Port Number Access Restriction B... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2013-07-12 | Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2012-0103.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2013-0126.nasl - Type : ACT_GATHER_INFO |
| 2013-01-17 | Name : The remote CentOS host is missing a security update. File : centos_RHSA-2013-0126.nasl - Type : ACT_GATHER_INFO |
| 2013-01-08 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-0126.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing a security update. File : sl_20120208_squirrelmail_on_SL4_x.nasl - Type : ACT_GATHER_INFO |
| 2012-02-09 | Name : The remote CentOS host is missing a security update. File : centos_RHSA-2012-0103.nasl - Type : ACT_GATHER_INFO |
| 2012-02-09 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2012-0103.nasl - Type : ACT_GATHER_INFO |
| 2012-02-02 | Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_SecUpd2012-001.nasl - Type : ACT_GATHER_INFO |
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-10244.nasl - Type : ACT_GATHER_INFO |
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-10259.nasl - Type : ACT_GATHER_INFO |
| 2010-07-01 | Name : The remote Fedora host is missing a security update. File : fedora_2010-10264.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:08:14 |
|
| 2024-11-28 12:21:51 |
|
| 2024-02-09 00:28:13 |
|
| 2021-05-05 01:06:58 |
|
| 2021-05-04 12:11:31 |
|
| 2021-04-22 01:12:07 |
|
| 2020-05-23 01:42:02 |
|
| 2020-05-23 00:25:43 |
|
| 2016-04-26 19:46:53 |
|
| 2014-02-17 10:55:09 |
|
| 2013-05-10 23:23:42 |
|
