Candidate: CVE-2010-1637 PublicDate: 2010-06-22 17:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1637 Description: The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_squirrelmail: debdiff: https://bugs.launchpad.net/ubuntu/+source/squirrelmail/+bug/598077 upstream_squirrelmail: needed dapper_squirrelmail: ignored (reached end-of-life) hardy_squirrelmail: released (2:1.4.13-2ubuntu1.6) jaunty_squirrelmail: released (2:1.4.15-4ubuntu0.4) karmic_squirrelmail: released (2:1.4.19-1ubuntu0.2) lucid_squirrelmail: released (2:1.4.20-1ubuntu0.1) devel_squirrelmail: not-affected (2:1.4.20-1ubuntu1)