Download
| Alert*
DSA-3852-1 squirrelmail -- squirrelmail
Dawid Golunski and Filippo Cavallarin discovered that squirrelmail, a webmail application, incorrectly handled a user-supplied value. This would allow a logged-in user to run arbitrary commands on the server.
|