NetSight
IP …
medium6.5

CVE-2010-1637

The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to s…

Impact

The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number.

Affected products

VendorProductAffected versions
SquirrelmailSquirrelmail
through 1.4.20
FedoraprojectFedora
Versions 11, 12, 13
AppleMac Os X
before 10.6.8
AppleMac Os X Server
before 10.6.8
RedhatEnterprise Linux Desktop
Version 5.0
RedhatEnterprise Linux Server
Version 5.0
RedhatEnterprise Linux Workstation
Version 5.0

Weakness classification

CWE-918

References