Re: [SM-USERS] squirrelmail CVE-2020-14933

2021-10-18 Thread James B. Byrne via squirrelmail-users
On Fri, October 15, 2021 14:37, Paul Lesniewski wrote: > > This was on my radar, but given your situation, I went ahead and contacted > both NIST and MITRE just now. If you have the FreeBSD maintainer's > contact info, I can work with that person too, but I don't understand what > you need fro

Re: [SM-USERS] squirrelmail CVE-2020-14933

2021-10-15 Thread Paul Lesniewski
On Thu, October 14, 2021 10:09 pm, Paul Lesniewski wrote: > On Thu, October 14, 2021 7:28 pm, James B. Byrne via squirrelmail-users > wrote: >> See: https://nvd.nist.gov/vuln/detail/CVE-2020-14933#match-5399106 >> >> Has this been patched? > > There is no vulnerability here. Per OWASP: > > https:

Re: [SM-USERS] squirrelmail CVE-2020-14933

2021-10-15 Thread Paul Lesniewski
On Fri, October 15, 2021 2:36 pm, James B. Byrne wrote: > n Thu, October 14, 2021 18:09, Paul Lesniewski wrote: >> On Thu, October 14, 2021 7:28 pm, James B. Byrne via squirrelmail-users >> wrote: >>> See: https://nvd.nist.gov/vuln/detail/CVE-2020-14933#match-5399106 >>> >>> Has this been patched

Re: [SM-USERS] squirrelmail CVE-2020-14933

2021-10-15 Thread James B. Byrne via squirrelmail-users
On Fri, October 15, 2021 10:36, James B. Byrne via squirrelmail-users wrote: > n Thu, October 14, 2021 18:09, Paul Lesniewski wrote: >> On Thu, October 14, 2021 7:28 pm, James B. Byrne via squirrelmail-users >> wrote: >>> See: https://nvd.nist.gov/vuln/detail/CVE-2020-14933#match-5399106 >>> >>>

Re: [SM-USERS] squirrelmail CVE-2020-14933

2021-10-15 Thread James B. Byrne via squirrelmail-users
On Fri, October 15, 2021 10:36, James B. Byrne via squirrelmail-users wrote: > n Thu, October 14, 2021 18:09, Paul Lesniewski wrote: >> On Thu, October 14, 2021 7:28 pm, James B. Byrne via squirrelmail-users >> wrote: >>> See: https://nvd.nist.gov/vuln/detail/CVE-2020-14933#match-5399106 >>> >>>

Re: [SM-USERS] squirrelmail CVE-2020-14933

2021-10-15 Thread James B. Byrne via squirrelmail-users
n Thu, October 14, 2021 18:09, Paul Lesniewski wrote: > On Thu, October 14, 2021 7:28 pm, James B. Byrne via squirrelmail-users > wrote: >> See: https://nvd.nist.gov/vuln/detail/CVE-2020-14933#match-5399106 >> >> Has this been patched? > > There is no vulnerability here. Per OWASP: > > https://owa

Re: [SM-USERS] squirrelmail CVE-2020-14933

2021-10-14 Thread Paul Lesniewski
On Thu, October 14, 2021 7:28 pm, James B. Byrne via squirrelmail-users wrote: > See: https://nvd.nist.gov/vuln/detail/CVE-2020-14933#match-5399106 > > Has this been patched? There is no vulnerability here. Per OWASP: https://owasp.org/www-community/vulnerabilities/PHP_Object_Injection = In

Re: [SM-USERS] squirrelmail CVE-2020-14933

2021-10-14 Thread Swaglord Buchiz
I need to get back in track of a long time now I've not been online based on some personal issues. I wish to learn back all I have lost. On Thu, Oct 14, 2021, 8:47 PM James B. Byrne via squirrelmail-users < squirrelmail-users@lists.sourceforge.net> wrote: > See: https://nvd.nist.gov/vuln/detail/C