VulnerabilityModified
CVE-2001-1258
Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.
LOW 3.6EPSS 0.46%
Does this matter?
Lower severity and a low EPSS score (0.46%). Track it; it rarely justifies an emergency change on its own.
Description
Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 0.46% probability · 39th percentile
- CISA KEV
- Not listed
- Affected
- horde/imp
- Source
- cve@mitre.org
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txtVendor Advisory
- http://www.debian.org/security/2001/dsa-073Exploit, Patch, Vendor Advisory
- http://www.iss.net/security_center/static/6906.php
- http://www.securityfocus.com/bid/3083
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://online.securityfocus.com/archive/1/198495
- http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txtVendor Advisory
- http://www.debian.org/security/2001/dsa-073Exploit, Patch, Vendor Advisory
- http://www.iss.net/security_center/static/6906.php
- http://www.securityfocus.com/bid/3083
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.