James Bercegay has reported a vulnerability in SquirrelMail, which can be exploited by malicious people to conduct cross-site scripting attacks, and disclose and manipulate sensitive information.

The vulnerability is caused due to an error where parameters are insecurely extracted in options_identities.php. This can be exploited to disclose and manipulate other users' preferences, write files to arbitrary locations, and execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability has been reported in versions 1.4.0 through 1.4.5-RC1.

Solution
Update to version 1.4.5.
Further details available in Customer Area

Provided and/or discovered by
James Bercegay, GulfTech Security.

Changelog
Further details available in Customer Area

Original Advisory
SquirrelMail:
http://www.squirrelmail.org/security/issue/2005-07-13

GulfTech Security:
http://www.gulftech.org/?node=research&article_id=00090-07142005

Deep Links
Links available in Customer Area