Squirrelmail Vulnerability 1.4.22

Quote: "As a temporary solution users can switch to SMTP based transport (as opposed to Sendmail)."

Vulnerability does only seem to affect SquirrelMail installations having "$useSendmail = true;" set in their configuration, which is not a default for SquirrelMail installed by DirectAdmin. So, vulnerability shouldn't affect SquirrelMail installations on DA servers.
 
Back
Top