Vulnerability in Horde Imp
CVE-2001-1258
Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.
EPSS: 0.005 (37.7th percentile) — read the EPSS interpretation.
Affected products
- Horde Imp — versions 2.0, 2.2, 2.2.1
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (Vendor Advisory, x_refsource_CALDERA, vendor-advisory)
- cve@mitre.org (Exploit, vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_CONFIRM, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)