CVE-2004-0521

Published: Aug 18, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.

Affected (18)

Products: Sgi: Propack · Squirrelmail: Squirrelmail

1 product

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Sgi Propack	Version 3.0
Squirrelmail Squirrelmail	Version 1.0.4
Squirrelmail Squirrelmail	Version 1.0.5
Squirrelmail Squirrelmail	Version 1.2.0
Squirrelmail Squirrelmail	Version 1.2.10
Squirrelmail Squirrelmail	Version 1.2.11
Squirrelmail Squirrelmail	Version 1.2.1
Squirrelmail Squirrelmail	Version 1.2.2
Squirrelmail Squirrelmail	Version 1.2.3
Squirrelmail Squirrelmail	Version 1.2.4
Squirrelmail Squirrelmail	Version 1.2.5
Squirrelmail Squirrelmail	Version 1.2.6
Squirrelmail Squirrelmail	Version 1.2.7
Squirrelmail Squirrelmail	Version 1.2.8
Squirrelmail Squirrelmail	Version 1.2.9
Squirrelmail Squirrelmail	Version 1.4.1
Squirrelmail Squirrelmail	Version 1.4.2
Squirrelmail Squirrelmail	Version 1.4

References (40)

ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858

Source: cve@mitre.org

http://marc.info/?l=squirrelmail-cvs&m=108309375029888

Source: cve@mitre.org

http://marc.info/?l=squirrelmail-cvs&m=108532891231712

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2004-240.html

Source: cve@mitre.org

http://secunia.com/advisories/11685

Source: cve@mitre.org

http://secunia.com/advisories/11686

Source: cve@mitre.org

http://secunia.com/advisories/11870

Source: cve@mitre.org

http://secunia.com/advisories/12289

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200405-16.xml

Source: cve@mitre.org

Vendor Advisory

http://www.ciac.org/ciac/bulletins/o-212.shtml

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-535

Source: cve@mitre.org

http://www.osvdb.org/6841

Source: cve@mitre.org

http://www.securityfocus.com/advisories/6827

Source: cve@mitre.org

http://www.securityfocus.com/advisories/7148

Source: cve@mitre.org

http://www.securityfocus.com/bid/10397

Source: cve@mitre.org

PatchVendor Advisory

https://bugzilla.fedora.us/show_bug.cgi?id=1733

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16235

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=squirrelmail-cvs&m=108309375029888

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=squirrelmail-cvs&m=108532891231712

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2004-240.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/11685

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/11686

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/11870

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/12289

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200405-16.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.ciac.org/ciac/bulletins/o-212.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2004/dsa-535

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/6841

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/advisories/6827

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/advisories/7148

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10397

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://bugzilla.fedora.us/show_bug.cgi?id=1733

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/16235

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.