Secunia

Three vulnerabilities have been reported in SquirrelMail, which can be exploited by malicious people to gain knowledge of sensitive information or conduct cross-site scripting attacks.

1) Insufficient sanitation of integer variables in webmail.php can be exploited to include arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site.

The vulnerability affects versions 1.4.0-RC1 through 1.4.4-RC1.

2) Insufficient validation of incoming URL vars in webmail.php can be exploited to include arbitrary web pages in the SquirrelMail frameset.

The vulnerability affects versions 1.4.0-RC1 through 1.4.4-RC1.

3) An error in prefs.php can be exploited to include arbitrary code from local resources via a specially crafted URL.

Successful exploitation requires that register_globals is set to "On".

The vulnerability affects versions 1.4.3-RC1 through 1.4.4-RC1.

Solution
Update to version 1.4.4.
Further details available in Customer Area

Provided and/or discovered by
1) Reported by vendor.
2) Manoel Zaninetti
3) Jimmy Conner

Original Advisory
http://www.squirrelmail.org/security/issue/2005-01-20
http://www.squirrelmail.org/security/issue/2005-01-19
http://www.squirrelmail.org/security/issue/2005-01-14

Deep Links
Links available in Customer Area