Vulnerability in Squirrelmail Gpg Plugin

CVE-2007-3635

Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634.

EPSS: 0.003 (17.9th percentile) — read the EPSS interpretation.

Affected products

Squirrelmail Gpg_plugin — versions 2.0
Squirrelmail — versions 1.4.10a
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (mailing-list, x_refsource_VIM)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)