CVE-2007-3635 Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might....
MediumCVSS 4.3
EPSS 0.26%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squirrelmail gpg plugin | = 2.0 | No fix listed |
| squirrelmail | = 1.4.10a | No fix listed |
References
- 45789 vdb-entry
- 20070710 SquirrelMail GPG Plugin Vulnerabilities mailing-list
- www.squirrelmail.org patch