CVE

Id
4062  
CVE No.
CVE-2001-1258  
Status
Candidate  
Description
Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.  
Phase
Proposed (20020502)  
Votes
ACCEPT(4) Cole, Cox, Frech, Green | NOOP(2) Foat, Wall  
Comments
Cox> VERIFYING. | CHANGE> [Cox changed vote from REVIEWING to ACCEPT]  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
18880 4062 CVE-2001-1258 BUGTRAQ:20010721 IMP 2.2.6 (SECURITY) released  View
18881 4062 CVE-2001-1258 URL:http://online.securityfocus.com/archive/1/198495  View
18882 4062 CVE-2001-1258 CALDERA:CSSA-2001-027.0  View
18883 4062 CVE-2001-1258 URL:http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt  View
18884 4062 CVE-2001-1258 CONECTIVA:CLA-2001:410  View
18885 4062 CVE-2001-1258 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410  View
18886 4062 CVE-2001-1258 CONFIRM:http://online.securityfocus.com/archive/1/198495  View
18887 4062 CVE-2001-1258 DEBIAN:DSA-073  View
18888 4062 CVE-2001-1258 URL:http://www.debian.org/security/2001/dsa-073  View
18889 4062 CVE-2001-1258 XF:imp-prefslang-gain-privileges(6906)  View
18890 4062 CVE-2001-1258 URL:http://www.iss.net/security_center/static/6906.php  View
18891 4062 CVE-2001-1258 BID:3083  View

Related JVN