Debian Security Update DSA-4168 squirrelmail - security update

[LinuxBot]

Florian Grunow und Birk Kauer of ERNW discovered a path traversal vulnerability in SquirrelMail, a webmail application, allowing an authenticated remote attacker to retrieve or delete arbitrary files via mail attachment.

Continue reading...