CVE:CVE-2007-3778
CNNVD:CNNVD-200707-249
Squirrelmail G/PGP (GPG) Plugin 2.0版本和2.1dev 20060912版本之前的版本允许远程攻击者可以借助对gpg_hook_functions.php中的gpg_check_sign_pgp_mime函数的messageSignedText参数内的外壳元字符，执行任意指令。
solution:Upgrade squirrelmail gpg_plugin to a higher version than 2.0,2.1_dev,and avoid the version 2.0,2.1_dev