Ubuntu
squirrelmail package

  1. Bug #328938
  2. Comment #7

Comment 7 for bug 328938

Revision history for this message
Andreas Wenning (andreas-wenning) wrote :

My mistake; here is the right file.

For CVE-2006-3174 and CVE-2006-3665 they both only occur if using register_globals. The Squirrelmail team defines this as a serious no-go, and will in general not even provide patches for it.

I'll take a look at both of them in any case though.