SquirrelMail is prone to a remote denial-of-service vulnerability because it fails to properly handle certain user requests. An attacker can exploit this issue to cause the application to consume excessive disk space, resulting in denial-of-service conditions. SquirrelMail versions prior and up to 1.4.20 are vulnerable others may also be affected.

Updates are available. Please see the references for more information.

• http://www.squirrelmail.org/
• http://www.squirrelmail.org/security/issue/2010-07-23
• https://bugzilla.redhat.com/show_bug.cgi?id=618096
• https://www.securityfocus.com/bid/42399

---

Updated on 2015-03-25