CVE:CVE-2018-8741
CNNVD:CNNVD-201803-613
SquirrelMail是一套跨平台的使用PHP4开发Webmail邮件系统。
SquirrelMail 1.4.22版本中存在目录遍历漏洞。攻击者可利用该漏洞获取或可能删除托管服务器上的文件。
solution:Upgrade squirrelmail squirrelmail to a higher version than 1.4.22,and avoid the version 1.4.22; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0