Launchpad.net

CVE 2009-1580

Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.

CVE-2009-1580 (Candidate) is related to these bugs:

Bug #375513: Multiple CVEs for Squirrelmail <1.4.17

		In	Importance	Status
375513	Multiple CVEs for Squirrelmail <1.4.17	squirrelmail (Ubuntu)	High	Fix Released
375513	Multiple CVEs for Squirrelmail <1.4.17	squirrelmail (Ubuntu Dapper)	High	Won't Fix
375513	Multiple CVEs for Squirrelmail <1.4.17	squirrelmail (Ubuntu Hardy)	High	Fix Released
375513	Multiple CVEs for Squirrelmail <1.4.17	squirrelmail (Ubuntu Intrepid)	High	Fix Released
375513	Multiple CVEs for Squirrelmail <1.4.17	squirrelmail (Ubuntu Jaunty)	High	Fix Released
375513	Multiple CVEs for Squirrelmail <1.4.17	squirrelmail (Ubuntu Karmic)	High	Fix Released

See the

CVE page on Mitre.org for more details.