Bug 97882 (CVE-2005-1769) - VUL-0: CVE-2005-1769: squirrelmail fix in 9.2 (and others perhaps) broken
Summary: VUL-0: CVE-2005-1769: squirrelmail fix in 9.2 (and others perhaps) broken
Status: RESOLVED FIXED
Alias: CVE-2005-1769
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other All
: P5 - None : Normal
Target Milestone: ---
Assignee: Marian Jancar
QA Contact: Security Team bot
URL:
Whiteboard: CVE-2005-1769: CVSS v2 Base Score: 4....
Keywords:
Depends on: CVE-2005-0104
Blocks:
  Show dependency treegraph
 
Reported: 2005-07-22 12:02 UTC by Marcus Meissner
Modified: 2021-11-11 14:35 UTC (History)
1 user (show)

See Also:
Found By: Other
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2005-07-22 12:02:18 UTC
from customer report on suse-security list. 
 
From: Leen de Braal <ldb@braha.nl> 
To: suse-security@suse.com 
 
Subject: [suse-security] error in squirrelmail after YOU (bug??) 
 
Fatal error: Call to undefined function: sq_defang() in 
/srv/www/htdocs/squirrelmail/functions/mime.php on line 1431 
 
Happens when opening an html-mail. 
 
I do not know why it has changed (I am not that much of a programmer), is 
it ok if I change this small block of code into comments? 
 
SuSE9.2 
squirrelmail-1.4.2-59.7
Comment 1 Marian Jancar 2005-07-22 16:45:10 UTC
It is in the fix for CAN-2005-1769. Should I fix it imemdialy or bundle it with
the fix for #96563? I'm sorry for this breakage, I test the squirrelmail on my
account and I rarely receive html mail..
Comment 2 Marcus Meissner 2005-07-22 16:48:24 UTC
bundle please. 
 
please just take the time it needs to fix all these issues, no unnecessary 
hurry. 
Comment 3 Marian Jancar 2005-08-15 13:43:46 UTC
fixed
Comment 4 Thomas Biege 2009-10-13 21:34:49 UTC
CVE-2005-1769: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)