PatchTheCVEsqwebmail vulnerabilities and fixes
Recent CVEs affecting sqwebmail, with upgrade or downgrade steps. 7 tracked.
sqwebmail has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-09-07. Highest priority: CVE-2004-0224 (score 53/100).
- CVE-2005-2820 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web sc
- CVE-2005-2769 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attacker
- CVE-2005-2724 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web sc
- CVE-2005-1308 HIGH 7.5 DOWNGRADE SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect pa
- CVE-2004-2313 MEDIUM 5.0 DOWNGRADE Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct
- CVE-2004-0591 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and
- CVE-2004-0224 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0
FAQ
How do I fix sqwebmail vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sqwebmail being exploited right now?
None of the tracked sqwebmail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sqwebmail CVE should I patch first?
CVE-2004-0224 currently ranks highest (53/100): Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.