CVE-2006-0377

no score yetEPSS 2.4%

squirrelmail squirrelmail: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2006-02-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

squirrelmail:squirrelmail

References

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
http://secunia.com/advisories/18985
http://secunia.com/advisories/19130
http://secunia.com/advisories/19131
http://secunia.com/advisories/19176

Check your stack JSON