FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

squirrelmail -- plugin.php local file inclusion vulnerability

Affected packages
squirrelmail < 1.4.6_1

Details

VuXML ID 00784d6e-f4ce-11da-87a1-000c6ec775d9
Discovery 2006-06-01
Entry 2006-06-05
Modified 2006-06-06

The SquirrelMail Project Team reports:

A security issue has been uncovered in functions/plugin.php that could allow a remote user to access local files on the server without requiring login. This issue manifests itself if register_globals is enabled, and magic_quotes_gpc is disabled.

References

URL http://secunia.com/advisories/20406/
URL http://www.squirrelmail.org/security/issue/2006-06-01