Vulnerabilities > CVE-2007-3636 - Remote Command Execution vulnerability in Squirrelmail GPG Plugin and Squirrelmail

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
squirrelmail
exploit available
NVD
Published: 2007-07-10
Updated: 2008-11-15

Summary

Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecified vectors. NOTE: this information is based upon a vague pre-advisory from a reliable researcher.

Vulnerable Configurations

Part Description Count
Application
Squirrelmail
2

Exploit-Db

descriptionSquirrelMail G/PGP Encryption Plug-in 2.0/2.1 Multiple Unspecified Remote Command Execution Vulnerabilities. CVE-2007-3636. Webapps exploit for php platform
idEDB-ID:30283
last seen2016-02-03
modified2007-07-09
published2007-07-09
reporterStefan Esser
sourcehttps://www.exploit-db.com/download/30283/
titleSquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Multiple Unspecified Remote Command Execution Vulnerabilities

Statements

contributorMark J Cox
lastmodified2007-07-10
organizationRed Hat
statementNot vulnerable. This plugin is not shipped with Squirrelmail in Red Hat Enterprise Linux.

References