CVE-2005-0075

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.htmlPatch
http://marc.info/?l=bugtraq&m=110702772714662&w=2
http://secunia.com/advisories/13962/Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
http://www.redhat.com/support/errata/RHSA-2005-099.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-135.htmlPatch, Vendor Advisory
http://www.squirrelmail.org/security/issue/2005-01-14Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.htmlPatch
http://marc.info/?l=bugtraq&m=110702772714662&w=2
http://secunia.com/advisories/13962/Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
http://www.redhat.com/support/errata/RHSA-2005-099.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-135.htmlPatch, Vendor Advisory
http://www.squirrelmail.org/security/issue/2005-01-14Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587

Timeline

Published: Jan 29, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-00767.2Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the libr CVE-2005-00772.1The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file.CVE-2005-00784.6The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with CVE-2005-00794.6Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.CVE-2005-00805.0The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail ad CVE-2005-00815.0MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request wi CVE-2005-00825.0The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of se CVE-2005-00835.0MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (app CVE-2005-00847.5Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packe CVE-2005-00856.8Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML CVE-2005-00867.5Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possib CVE-2005-00874.6The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execu