CVE-2002-1132: Medium severity squirrelmail squirrelmail vulnerability
SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1132?
CVE-2002-1132 is classified as a moderate severity vulnerability due to its potential to expose sensitive filesystem information.
How does CVE-2002-1132 affect SquirrelMail?
CVE-2002-1132 allows remote attackers to determine the absolute pathname of the options.php script through a specially crafted request.
What versions of SquirrelMail are affected by CVE-2002-1132?
CVE-2002-1132 affects SquirrelMail versions 1.2.7 and earlier.
How can I mitigate CVE-2002-1132?
To mitigate CVE-2002-1132, it is recommended to upgrade SquirrelMail to a version later than 1.2.7.
Is there a workaround for CVE-2002-1132?
While upgrading is the best solution, ensuring that appropriate input validation and error handling practices are in place can help reduce exposure from CVE-2002-1132.