CVE-2001-1159

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-07/0029.htmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/6775.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/2968Patch, Vendor Advisory
http://www.squirrelmail.org/changelog.php
http://archives.neohapsis.com/archives/bugtraq/2001-07/0029.htmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/6775.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/2968Patch, Vendor Advisory
http://www.squirrelmail.org/changelog.php

Timeline

Published: Jul 2, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-11607.5udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metachar CVE-2001-11617.5Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that CVE-2001-116210.0Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overw CVE-2001-116310.0Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.CVE-2001-11647.2Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2 CVE-2001-11654.6Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting CVE-2001-11665.0linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a CVE-2001-11685.0Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (mo CVE-2001-11697.5keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privile CVE-2001-11705.0AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal a CVE-2001-11717.2Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, w CVE-2001-11724.6OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file