CVE-2010-1637

The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number.

• CWE-918

• http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf#page=69Broken Link
• http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlMailing List
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043239.htmlMailing List
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043258.htmlMailing List
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043261.htmlMailing List
• http://rhn.redhat.com/errata/RHSA-2012-0103.htmlThird Party Advisory
• http://secunia.com/advisories/40307Broken Link
• http://squirrelmail.org/security/issue/2010-06-21Patch, Vendor Advisory
• http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/functions.php?r1=13951&r2=13950&pathrev=13951Product
• http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/options.php?r1=13951&r2=13950&pathrev=13951Patch
• http://support.apple.com/kb/HT5130Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:120Broken Link
• http://www.openwall.com/lists/oss-security/2010/05/25/3Mailing List
• http://www.openwall.com/lists/oss-security/2010/05/25/9Mailing List
• http://www.openwall.com/lists/oss-security/2010/06/21/1Mailing List, Patch
• http://www.securityfocus.com/bid/40291Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/40307Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2010/1535Broken Link
• http://www.vupen.com/english/advisories/2010/1536Broken Link
• http://www.vupen.com/english/advisories/2010/1554Broken Link
• http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf#page=69Broken Link
• http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlMailing List
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043239.htmlMailing List
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043258.htmlMailing List
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043261.htmlMailing List
• http://rhn.redhat.com/errata/RHSA-2012-0103.htmlThird Party Advisory
• http://secunia.com/advisories/40307Broken Link
• http://squirrelmail.org/security/issue/2010-06-21Patch, Vendor Advisory
• http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/functions.php?r1=13951&r2=13950&pathrev=13951Product
• http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/options.php?r1=13951&r2=13950&pathrev=13951Patch
• http://support.apple.com/kb/HT5130Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:120Broken Link
• http://www.openwall.com/lists/oss-security/2010/05/25/3Mailing List
• http://www.openwall.com/lists/oss-security/2010/05/25/9Mailing List
• http://www.openwall.com/lists/oss-security/2010/06/21/1Mailing List, Patch
• http://www.securityfocus.com/bid/40291Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/40307Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2010/1535Broken Link
• http://www.vupen.com/english/advisories/2010/1536Broken Link
• http://www.vupen.com/english/advisories/2010/1554Broken Link

Published

Jun 22, 2010

Last Modified

Jun 16, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1631Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-1632Apache Axis2 before 1.5.2, as used in IBM WebSphere Applicat…
• CVE-2010-1633RSA verification recovery in the EVP_PKEY_verify_recover fun…
• CVE-2010-1634Multiple integer overflows in audioop.c in the audioop modul…
• CVE-2010-1635The chain_reply function in process.c in smbd in Samba befor…
• CVE-2010-1636The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the bt…
• CVE-2010-1638The IMP plugin in Horde allows remote attackers to bypass fi…
• CVE-2010-1639The cli_pdf function in libclamav/pdf.c in ClamAV before 0.9…
• CVE-2010-1640Off-by-one error in the parseicon function in libclamav/pe_i…
• CVE-2010-1641The do_gfs2_set_flags function in fs/gfs2/file.c in the Linu…
• CVE-2010-1642The reply_sesssetup_and_X_spnego function in sesssetup.c in …
• CVE-2010-1643mm/shmem.c in the Linux kernel before 2.6.28-rc3, when stric…