Bug 97882 (CVE-2005-1769)

Summary: VUL-0: CVE-2005-1769: squirrelmail fix in 9.2 (and others perhaps) broken
Product: [Novell Products] SUSE Security Incidents Reporter: Marcus Meissner <meissner>
Component: IncidentsAssignee: Marian Jancar <mjancar>
Status: RESOLVED FIXED QA Contact: Security Team bot <security-team>
Severity: Normal    
Priority: P5 - None CC: security-team
Version: unspecified   
Target Milestone: ---   
Hardware: Other   
OS: All   
Whiteboard: CVE-2005-1769: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Found By: Other Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Bug Depends on: 96563    
Bug Blocks:    

Description Marcus Meissner 2005-07-22 12:02:18 UTC 
from customer report on suse-security list. 
 
From: Leen de Braal <ldb@braha.nl> 
To: suse-security@suse.com 
 
Subject: [suse-security] error in squirrelmail after YOU (bug??) 
 
Fatal error: Call to undefined function: sq_defang() in 
/srv/www/htdocs/squirrelmail/functions/mime.php on line 1431 
 
Happens when opening an html-mail. 
 
I do not know why it has changed (I am not that much of a programmer), is 
it ok if I change this small block of code into comments? 
 
SuSE9.2 
squirrelmail-1.4.2-59.7
Comment 1 Marian Jancar 2005-07-22 16:45:10 UTC 
It is in the fix for CAN-2005-1769. Should I fix it imemdialy or bundle it with
the fix for #96563? I'm sorry for this breakage, I test the squirrelmail on my
account and I rarely receive html mail..
Comment 2 Marcus Meissner 2005-07-22 16:48:24 UTC 
bundle please. 
 
please just take the time it needs to fix all these issues, no unnecessary 
hurry.
Comment 3 Marian Jancar 2005-08-15 13:43:46 UTC 
fixed
Comment 4 Thomas Biege 2009-10-13 21:34:49 UTC 
CVE-2005-1769: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)