← Vulnerability feed

Vulnerability record · CVE-2006-4169 · published 15 July 2007

CVE-2006-4169: Squirrelmail gpg plugin vulnerability

Squirrelmail · Gpg Plugin

Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the help parameter to (1) gpg_help.php or (2) gpg_help_base.php.

5.5 CVSS 2.0 Medium EPSS 1.6% · top 24.9%
5.5CVSS 2.0 base score
1.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the help parameter to (1) gpg_help.php or (2) gpg_help_base.php.

AV:N/AC:L/Au:S/C:P/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=555
http://osvdb.org/37932
http://osvdb.org/37933
http://secunia.com/advisories/26035 Vendor Advisory
http://secunia.com/advisories/26424
http://security.gentoo.org/glsa/glsa-200708-08.xml
http://www.securityfocus.com/bid/24874
http://www.vupen.com/english/advisories/2007/2513
https://exchange.xforce.ibmcloud.com/vulnerabilities/35362
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=555
http://osvdb.org/37932
http://osvdb.org/37933
http://secunia.com/advisories/26035 Vendor Advisory
http://secunia.com/advisories/26424
http://security.gentoo.org/glsa/glsa-200708-08.xml
http://www.securityfocus.com/bid/24874
http://www.vupen.com/english/advisories/2007/2513
https://exchange.xforce.ibmcloud.com/vulnerabilities/35362

Track CVE-2006-4169 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2005-1924Squirrelmail gpg plugin vulnerabilityThe G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1…EPSS 10%7.5CVE-2007-3778Squirrelmail gpg plugin vulnerabilityThe G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacte…EPSS 2.7%7.5CVE-2007-3636Squirrelmail gpg plugin vulnerabilityMultiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecif…EPSS 3.1%6.5CVE-2007-3634Squirrelmail gpg plugin vulnerabilityUnspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via …EPSS 1.6%4.3CVE-2007-3779Squirrelmail gpg plugin vulnerabilityPHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail allows remote attackers to incl…EPSS 1.2%4.3CVE-2007-3635Squirrelmail gpg plugin vulnerabilityMultiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain …EPSS 0.26%

Source: NIST National Vulnerability Database (record CVE-2006-4169), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.