Synopsis

squirrelmail security update

Type/Severity

Security Advisory: Moderate

Topic

An updated squirrelmail package that fixes three security and many other
bug issues is now available. This update contains bug fixes of upstream
squirrelmail 1.4.6 with some additional improvements to international
language support.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

SquirrelMail is a standards-based webmail package written in PHP4.

A bug was found in the way SquirrelMail presents the right frame to the
user. If a user can be tricked into opening a carefully crafted URL, it is
possible to present the user with arbitrary HTML data. (CVE-2006-0188)

A bug was found in the way SquirrelMail filters incoming HTML email. It is
possible to cause a victim's web browser to request remote content by
opening a HTML email while running a web browser that processes certain
types of invalid style sheets. Only Internet Explorer is known to process
such malformed style sheets. (CVE-2006-0195)

A bug was found in the way SquirrelMail processes a request to select an
IMAP mailbox. If a user can be tricked into opening a carefully crafted
URL, it is possible to execute arbitrary IMAP commands as the user viewing
their mail with SquirrelMail. (CVE-2006-0377)

Users of SquirrelMail are advised to upgrade to this updated package, which
contains SquirrelMail version 1.4.6 and is not vulnerable to these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 182579 - CVE-2006-0188 Possible XSS through right_frame parameter in webmail.php
• BZ - 182581 - CVE-2006-0195 Possible XSS in MagicHTML (IE only)
• BZ - 182584 - CVE-2006-0377 IMAP injection in sqimap_mailbox_select mailbox parameter

CVEs

• CVE-2006-0188
• CVE-2006-0195
• CVE-2006-0377

References

• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 4

SRPM
squirrelmail-1.4.6-5.el4.src.rpm	SHA-256: 9779b60d227b7f79296b6be02fa191439d6ac4abf73a77d36199398b7edbccbb
x86_64
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
ia64
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
i386
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64

Red Hat Enterprise Linux Workstation 4

SRPM
squirrelmail-1.4.6-5.el4.src.rpm	SHA-256: 9779b60d227b7f79296b6be02fa191439d6ac4abf73a77d36199398b7edbccbb
x86_64
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
ia64
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
i386
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64

Red Hat Enterprise Linux Desktop 4

SRPM
squirrelmail-1.4.6-5.el4.src.rpm	SHA-256: 9779b60d227b7f79296b6be02fa191439d6ac4abf73a77d36199398b7edbccbb
x86_64
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
i386
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
squirrelmail-1.4.6-5.el4.src.rpm	SHA-256: 9779b60d227b7f79296b6be02fa191439d6ac4abf73a77d36199398b7edbccbb
s390x
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64
s390
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64

Red Hat Enterprise Linux for Power, big endian 4

SRPM
squirrelmail-1.4.6-5.el4.src.rpm	SHA-256: 9779b60d227b7f79296b6be02fa191439d6ac4abf73a77d36199398b7edbccbb
ppc
squirrelmail-1.4.6-5.el4.noarch.rpm	SHA-256: 5e61084b6294df53fe161e60dae2b66837bdbe1118000886d615f4d737ddbf64