Oval Definition:oval:com.ubuntu.precise:def:20104555000
Revision Date:2011-07-14Version:1
Title:CVE-2010-4555 on Ubuntu 12.04 LTS (precise) - low.
Description:Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) drop-down selection lists, (2) the > (greater than) character in the SquirrelSpell spellchecking plugin, and (3) errors associated with the Index Order (aka options_order) page.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2010-4555
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND While related to the CVE in some way, the 'squirrelmail' package in precise is not affected (note: '2:1.4.22-1').
    • BACK