The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Addressbook | — | Apply OS X security update 2012-001Upgrade macOS to the latest version | Aug 28, 2015 | Jun 22, 2010 |
| Apple Osx Squirrelmail | — | Apply OS X security update 2012-001 | Feb 3, 2012 | Jun 22, 2010 |
| Centos_linux | — | Upgrade squirrelmail | Dec 1, 2016 | Jun 22, 2010 |
| Oracle_linux | — | Upgrade squirrelmail | Oct 16, 2024 | Jun 22, 2010 |
| Redhat_linux | — | — | Jul 9, 2025 | May 20, 2010 |
| Ubuntu | — | Upgrade squirrelmail | Nov 19, 2024 | Jun 22, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub