Unscored severity · published Jan 21, 2009
CVE-2009-0030
A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists…
–
CVSS
1.7%
EPSS
No
On KEV
Description
A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SQ
Squirrelmail · Squirrelmail
1.4.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0030
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0030
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
Vendor Advisory
http://secunia.com/advisories/33611
securitytracker.com
http://securitytracker.com/id?1021611
www.securityfocus.com
http://www.securityfocus.com/bid/33354
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=480224
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=480488
More from Squirrelmail
9.8
CVE-2020-14932
compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request
8.8
CVE-2020-14933
compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request
8.8
CVE-2018-8741
A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting server, related to ../ in the…
8.8
CVE-2017-7692
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call
6.5
CVE-2010-1637
The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal…