Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SquirrelMail 'mail_fetch' 远程信息泄露漏洞
Vulnerability Description
SquirrelMail是一个多功能的用PHP4实现的Webmail程序,可运行于Linux/Unix类操作系统下,它允许利用plugin来扩展系统的功能。 SquirrelMail的Mail Fetch插件存在漏洞,远程认证用户可利用被修改的POP3端口号绕开防火墙限制,并以SquirrelMail为代理服务器扫描内部网络。
CVSS Information
N/A
Vulnerability Type
N/A