SMTP: SqWebMail Email Header HTML Injection
This signature detects SMTP messages containing HTML code in SqWebmail. Attackers can send maliciously crafted SMTP messages to execute arbitrary HTML code at the same privilege level as the target.
Extended Description
SqWebMail is reported to be prone to an email header HTML injection vulnerability. This issue presents itself due to a failure of the application to properly sanitize user-supplied email header strings. The problem presents itself when an unsuspecting user views an email message containing malicious HTML and script code in the email header. An attacker can exploit this issue to gain access to an unsuspecting user's cookie based authentication credentials.
Affected Products
Inter7 sqwebmail
Short Name
SMTP:SQWEBMAIL-EMAIL-HEADER-INJ
Severity
Minor
Recommended
False
Recommended Action
None
Category
SMTP
Keywords
CVE-2004-0591 Email HTML Header Injection SqWebMail bid:10588
Release Date
05/06/2013
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3839
False Positive
Unknown
Vendors
Inter7
CVSS Score
6.8