CVE-2007-3635

Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2007-07-10

Last modified

2024-08-07

Affected products

• Gpg Plugin (Squirrelmail)
• Squirrelmail (Squirrelmail)

References

• http://osvdb.org/45789
• http://www.attrition.org/pipermail/vim/2007-July/001703.html
• http://www.squirrelmail.org/plugin_view.php?id=153