SquirrelMail Three Vulnerabilities
http://secunia.com/advisories/13962/

Description:
Three vulnerabilities have been reported in SquirrelMail, which can be exploited by malicious people to gain knowledge of sensitive information or conduct cross-site scripting attacks.

1) Insufficient sanitation of integer variables in webmail.php can be exploited to include arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site.

The vulnerability affects versions 1.4.0-RC1 through 1.4.4-RC1.

2) Insufficient validation of incoming URL vars in webmail.php can be exploited to include arbitrary web pages in the SquirrelMail frameset.

The vulnerability affects versions 1.4.0-RC1 through 1.4.4-RC1.

3) An error in prefs.php can be exploited to include arbitrary code from local resources via a specially crafted URL.

Successful exploitation requires that register_globals is set to "On".

The vulnerability affects versions 1.4.3-RC1 through 1.4.4-RC1.

Solution:
Update to version 1.4.4.
http://www.squirrelmail.org/download.php

Provided and/or discovered by:
1) Reported by vendor.
2) Manoel Zaninetti
3) Jimmy Conner

Original Advisory:
http://www.squirrelmail.org/security/issue/2005-01-20
http://www.squirrelmail.org/security/issue/2005-01-19
http://www.squirrelmail.org/security/issue/2005-01-14


I have updated my HOW-TO on upgrading to SquirrelMail 1.4.4:

HOW-TO: Upgrade to SquirrelMail 1.4.4 on cPanel
http://www.unofficial-support.com/article/...rrelmail_cpanel