CVE-2010-2813

functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a…

published August 19, 2010

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preferences files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04048 · 90.5th percentile
Published
2010-08-19T17:43Z
EPSS history
Timeline
  • 19 AUG 17:43Z
    functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a…
    cvelistv5