CVE-2001-1159: High severity Squirrelmail Squirrelmail vulnerability
loadprefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the configphp and datadir options, and (2) execute arbitrary code by using optionsorder.php to upload a message that could be interpreted as PHP.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1159?
CVE-2001-1159 is considered a high severity vulnerability due to its potential to allow remote code execution and unauthorized file access.
How do I fix CVE-2001-1159?
To fix CVE-2001-1159, upgrade SquirrelMail to version 1.0.5 or later to eliminate the vulnerable code.
What are the implications of CVE-2001-1159 for SquirrelMail users?
Users of SquirrelMail vulnerable to CVE-2001-1159 may face data disclosure risks and the capability for attackers to execute arbitrary code.
Who is impacted by CVE-2001-1159?
CVE-2001-1159 impacts all users of SquirrelMail versions 1.0.4 and earlier.
What can attackers do with CVE-2001-1159?
Attackers can exploit CVE-2001-1159 to view sensitive files and potentially execute arbitrary code on the server.