CVE-2011-2752 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	5.8 UNKNOWN	NETWORK	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:P
mitre	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 63%

Vendor	Product	Version
squirrelmail	squirrelmail	𝑥 ≤ 1.4.21
squirrelmail	squirrelmail	0.1
squirrelmail	squirrelmail	0.1.1
squirrelmail	squirrelmail	0.1.2
squirrelmail	squirrelmail	0.2
squirrelmail	squirrelmail	0.2.1
squirrelmail	squirrelmail	0.3
squirrelmail	squirrelmail	0.3.1
squirrelmail	squirrelmail	0.3pre1:pre1
squirrelmail	squirrelmail	0.3pre2:pre2
squirrelmail	squirrelmail	0.4
squirrelmail	squirrelmail	0.4pre1:pre1
squirrelmail	squirrelmail	0.4pre2:pre2
squirrelmail	squirrelmail	0.5
squirrelmail	squirrelmail	0.5pre1:pre1
squirrelmail	squirrelmail	0.5pre2:pre2
squirrelmail	squirrelmail	1.0
squirrelmail	squirrelmail	1.0.1
squirrelmail	squirrelmail	1.0.2
squirrelmail	squirrelmail	1.0.3
squirrelmail	squirrelmail	1.0.4
squirrelmail	squirrelmail	1.0.5
squirrelmail	squirrelmail	1.0.6
squirrelmail	squirrelmail	1.0pre1:pre1
squirrelmail	squirrelmail	1.0pre2:pre2
squirrelmail	squirrelmail	1.0pre3:pre3
squirrelmail	squirrelmail	1.1.0
squirrelmail	squirrelmail	1.1.1
squirrelmail	squirrelmail	1.1.2
squirrelmail	squirrelmail	1.1.3
squirrelmail	squirrelmail	1.2
squirrelmail	squirrelmail	1.2.0
squirrelmail	squirrelmail	1.2.0:rc3
squirrelmail	squirrelmail	1.2.1
squirrelmail	squirrelmail	1.2.2
squirrelmail	squirrelmail	1.2.3
squirrelmail	squirrelmail	1.2.4
squirrelmail	squirrelmail	1.2.5
squirrelmail	squirrelmail	1.2.6
squirrelmail	squirrelmail	1.2.6:rc1
squirrelmail	squirrelmail	1.2.7
squirrelmail	squirrelmail	1.2.8
squirrelmail	squirrelmail	1.2.9
squirrelmail	squirrelmail	1.2.10
squirrelmail	squirrelmail	1.2.11
squirrelmail	squirrelmail	1.3.0
squirrelmail	squirrelmail	1.3.1
squirrelmail	squirrelmail	1.3.2
squirrelmail	squirrelmail	1.4
squirrelmail	squirrelmail	1.4:rc1
squirrelmail	squirrelmail	1.4.0
squirrelmail	squirrelmail	1.4.0:rc1
squirrelmail	squirrelmail	1.4.0:rc2a
squirrelmail	squirrelmail	1.4.0-r1
squirrelmail	squirrelmail	1.4.1
squirrelmail	squirrelmail	1.4.2
squirrelmail	squirrelmail	1.4.2-r1
squirrelmail	squirrelmail	1.4.2-r2
squirrelmail	squirrelmail	1.4.2-r3
squirrelmail	squirrelmail	1.4.2-r4
squirrelmail	squirrelmail	1.4.2-r5
squirrelmail	squirrelmail	1.4.3
squirrelmail	squirrelmail	1.4.3:r3
squirrelmail	squirrelmail	1.4.3:rc1
squirrelmail	squirrelmail	1.4.3a:a
squirrelmail	squirrelmail	1.4.3aa:aa
squirrelmail	squirrelmail	1.4.4
squirrelmail	squirrelmail	1.4.4:rc1
squirrelmail	squirrelmail	1.4.5
squirrelmail	squirrelmail	1.4.5:rc1
squirrelmail	squirrelmail	1.4.6
squirrelmail	squirrelmail	1.4.6:rc1
squirrelmail	squirrelmail	1.4.6_cvs:_cvs
squirrelmail	squirrelmail	1.4.7
squirrelmail	squirrelmail	1.4.8
squirrelmail	squirrelmail	1.4.8.4fc6:fc6
squirrelmail	squirrelmail	1.4.9
squirrelmail	squirrelmail	1.4.9a:a
squirrelmail	squirrelmail	1.4.10
squirrelmail	squirrelmail	1.4.10a:a
squirrelmail	squirrelmail	1.4.11
squirrelmail	squirrelmail	1.4.12
squirrelmail	squirrelmail	1.4.13
squirrelmail	squirrelmail	1.4.15
squirrelmail	squirrelmail	1.4.15:rc1
squirrelmail	squirrelmail	1.4.15rc1:rc1
squirrelmail	squirrelmail	1.4.16
squirrelmail	squirrelmail	1.4.17
squirrelmail	squirrelmail	1.4.18
squirrelmail	squirrelmail	1.4.19
squirrelmail	squirrelmail	1.4.20

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

squirrelmail

yakkety	not-affected
xenial	not-affected
wily	ignored
vivid	ignored
utopic	ignored
trusty	not-affected
saucy	ignored
raring	ignored
quantal	ignored
precise	not-affected
oneiric	ignored
natty	ignored
maverick	ignored
lucid	ignored
hardy	ignored

Common Weakness Enumeration

CWE-94 - Improper Control of Generation of Code ('Code Injection')
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References

http://rhn.redhat.com/errata/RHSA-2012-0103.html

http://www.debian.org/security/2011/dsa-2291

http://www.mandriva.com/security/advisories?name=MDVSA-2011:123

http://www.squirrelmail.org/security/issue/2011-07-11

https://exchange.xforce.ibmcloud.com/vulnerabilities/68587

http://rhn.redhat.com/errata/RHSA-2012-0103.html

http://www.debian.org/security/2011/dsa-2291

http://www.mandriva.com/security/advisories?name=MDVSA-2011:123

http://www.squirrelmail.org/security/issue/2011-07-11

https://exchange.xforce.ibmcloud.com/vulnerabilities/68587