CVE-2008-2379

Impact:
Moderate
Public Date:
2008-12-03
CWE:
CWE-79
Bugzilla:
473877: CVE-2008-2379 squirrelmail: XSS issue caused by an insufficient html mail sanitation

The MITRE CVE dictionary describes this issue as:

Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message.

Find out more about CVE-2008-2379 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 5 (squirrelmail) RHSA-2009:0010 2009-01-12
Red Hat Enterprise Linux 4 (squirrelmail) RHSA-2009:0010 2009-01-12
Red Hat Enterprise Linux 3 (squirrelmail) RHSA-2009:0010 2009-01-12

This page is generated automatically and has not been checked for errors or omissions.

For clarification or corrections please contact Red Hat Product Security.

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.