VulnerabilityModified

CVE-2007-3635

Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors.

MEDIUM 4.3EPSS 0.26%

Does this matter?

Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634.

CVSS 2.0: 4.3 MEDIUMAV:L/AC:L/Au:S/C:P/I:P/A:P
EPSS: 0.26% probability · 18th percentile
CISA KEV: Not listed
Affected: squirrelmail/gpg plugin · squirrelmail/squirrelmail
Source: cve@mitre.org

References

http://osvdb.org/45789
http://www.attrition.org/pipermail/vim/2007-July/001703.html
http://www.squirrelmail.org/plugin_view.php?id=153Patch
http://osvdb.org/45789
http://www.attrition.org/pipermail/vim/2007-July/001703.html
http://www.squirrelmail.org/plugin_view.php?id=153Patch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.