CVE-2011-2752

Priority
Low
Description
CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows
remote attackers to modify or add preference values via a \n (newline)
character, a different vulnerability than CVE-2010-4555.
References
Package
Upstream:needs-triage
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):needs-triage
Ubuntu 12.10 (Quantal Quetzal):needs-triage
Ubuntu 13.04 (Raring Ringtail):ignored (reached end-of-life)
Ubuntu 13.10 (Saucy Salamander):needs-triage
Ubuntu 14.04 LTS (Trusty Tahr):needs-triage
More Information

Valid XHTML 1.0 Strict

Updated: 2014-01-27 19:15:02 UTC (commit 7690)