Intrusion PreventionEmail.Attachment.MIME.JPG.XSS
Description
This threat sends an email with a .jpg extension but with a MIME encoding of text/html. This causes the SqWebMail email application to execute the Javascript contained inside. This Javascript can be used to create a cross site scripting situation where the attacker can create and delete email without user intervention.
Affected Products
Inter7 SqWebMail 4.0.5
Inter7 SqWebMail 4.0.4 .20040524
Inter7 SqWebMail 3.6.1
Inter7 SqWebMail 3.6 .0
Inter7 SqWebMail 3.5.3
Inter7 SqWebMail 3.5.2
Inter7 SqWebMail 3.5.1
Inter7 SqWebMail 3.5 .0
Inter7 SqWebMail 3.4.1
Impact
System compromise.
Recommended Actions
Currently we are not aware of any vendor-supplied patches for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 |
| ID | 14307 |
| Created | Mar 13, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2005-1308 |
| Exploit Prediction Score | 1.16% |
| Default Action | pass |
| Active | |
| Affected OS | Linux, BSD, Other |
| Affected App | Other |