Debian Security Advisory 1154-1 – James Bercegay of GulfTech Security Research discovered a vulnerability in SquirrelMail where an authenticated user could overwrite random variables in the compose script. This might be exploited to read or write the preferences or attachment files of other users.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49402/dsa-1154-1.txt
Source: https://packetstormsecurity.com/files/49402/Debian-Linux-Security-Advisory-1154-1.html