UBUNTU-CVE-2011-2753

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2011-2753
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-2753.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2011-2753
Upstream
  • CVE-2011-2753
Withdrawn
2025-07-18T16:42:43Z
Published
2011-07-17T20:55:00Z
Modified
2025-07-16T08:10:29Z
Severity
  • Ubuntu - medium
Summary
[none]
Details

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.

References

Affected packages

Ubuntu:14.04:LTS / squirrelmail

Package

Name
squirrelmail
Purl
pkg:deb/ubuntu/squirrelmail@2:1.4.23~svn20120406-2?arch=source&distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:1.4.23~svn20120406-2

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "squirrelmail",
            "binary_version": "2:1.4.23~svn20120406-2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-2753.json"

Ubuntu:16.04:LTS / squirrelmail

Package

Name
squirrelmail
Purl
pkg:deb/ubuntu/squirrelmail@2:1.4.23~svn20120406-2ubuntu1?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:1.4.23~svn20120406-2ubuntu1

Affected versions

2:1.*
2:1.4.23~svn20120406-2

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "squirrelmail",
            "binary_version": "2:1.4.23~svn20120406-2ubuntu1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2011/UBUNTU-CVE-2011-2753.json"