This bug has already been corrected, that’s why it’s been published.
In this manual you will see step by step how to exploit Gmail’s
vulnerability, that gave you access to any account, reported by
Anelkaos, colaborator of elhacker.net’s forum and patched by Google by
October 18. Due to the bug’s gravity (that allowed in a few simple steps
to login [...]

Posted in Email Systems 2 Comments »

Vendor : The SquirrelMail Project Team
URL : http://www.squirrelmail.org/
Version : SquirrelMail 1.4.5-RC1 && Earlier
Risk : Variable Overwriting
Description:
SquirrelMail is a standards-based webmail package written in php. It
includes built-in pure PHP support for the IMAP and SMTP protocols.
Unfortunately there is a fairly serious variable handling issue in one
of the core [...]

Posted in Email Systems, Exploits and Bugs No Comments »

Package name: squirrelmail
Advisory ID: MDKSA-2005:108
Date: June 30th, 2005
Affected versions: Corporate 3.0
Problem [...]

Posted in Email Systems, Exploits and Bugs No Comments »