CVE-2006-4019 json
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary prog…
published 2006-08-11 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4012
- cvss
- 6.4
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 10.0%
- EPSS 10.0% chance of exploitation in 30 days, percentile 95%
- public exploits
- 1
- Exploit-DB
Summary
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.
Patch / fix
- squirrelmail RHEL 3 1.4.8-2.el3
- squirrelmail RHEL 4 1.4.8-2.el4
red hat advisories RHSA-2006:0668
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2006-4019 updated
security flaw
-
Red Hat Desktop version 3 squirrelmail 1.4.8-2.el3 Red Hat Enterprise Linux AS version 3 squirrelmail 1.4.8-2.el3 Red Hat Enterprise Linux AS version 4 squirrelmail 1.4.8-2.el4 Red Hat Enterprise Linux Desktop version 4 squirrelmail 1.4.8-2.el4 Red Hat Enterprise Linux ES version 3 squirrelmail 1.4.8-2.el3 Red Hat Enterprise Linux ES version 4 squirrelmail 1.4.8-2.el4fixed: vendor fix RHSA-2006:0668
+2 more productsfewer
Red Hat Enterprise Linux WS version 3 squirrelmail 1.4.8-2.el3 Red Hat Enterprise Linux WS version 4 squirrelmail 1.4.8-2.el4
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- Published
- First public exploit (EDB-43839)
Exploit prediction
9.98% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-43839 SquirrelMail < 1.4.7 - Arbitrary Variable Overwrite webapps, 2016-08-11
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:P/I:P/A:N |
References
-
secunia.com
/advisories/21354
third-party-advisory, patch, vendor-advisory
-
squirrelmail.org
/patches/sqm1.4.7-expired-post-fix-full.patch
patch
-
squirrelmail.org
/security/issue/2006-08-11
patch
-
debian.org
/security/2006/dsa-1154
vendor-advisory
-
novell.com
/linux/security/advisories/2006_23_sr.html
vendor-advisory
-
lists.apple.com
/archives/security-announce//2007/Jul/msg00004.html
vendor-advisory
-
redhat.com
/support/errata/RHSA-2006-0668.html
vendor-advisory
-
mandriva.com
/security/advisories?name=MDKSA-2006:147
vendor-advisory
-
secunia.com
/advisories/21586
third-party-advisory
- issues.rpath.com /browse/RPL-577
-
vupen.com
/english/advisories/2007/2732
vdb-entry
-
secunia.com
/advisories/22487
third-party-advisory
-
securitytracker.com
/id?1016689
vdb-entry
-
vupen.com
/english/advisories/2006/3271
vdb-entry
-
secunia.com
/advisories/21444
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/28365
vdb-entry
-
secunia.com
/advisories/22080
third-party-advisory
-
attrition.org
/pipermail/vim/2006-August/000970.html
mailing-list
-
securityfocus.com
/bid/19486
vdb-entry
-
secunia.com
/advisories/22104
third-party-advisory
-
securityfocus.com
/archive/1/442993/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/442980/100/0/threaded
mailing-list
-
marc.info
/?l=full-disclosure&m=115532449024178&w=2
mailing-list
-
osvdb.org
/27917
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11533
vdb-entry, signature
- docs.info.apple.com /article.html?artnum=306172
-
securityfocus.com
/bid/25159
vdb-entry
-
secunia.com
/advisories/26235
third-party-advisory
Sources
- CVE List CVE-2006-4019
- NVD CVE-2006-4019
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.