CVE-2010-1637
Fixed in a distro release EPSS 3%
The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number.
Products: squirrelmail, fedoraproject fedora, apple mac_os_x, apple mac_os_x_server, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 4 | squirrelmail | 0:1.4.8-18.el4 |
| Red Hat Enterprise Linux 5 | squirrelmail | 0:1.4.8-5.el5_7.13 |