What’s Vulnerable › Vulnerabilities

CVE-2001-1258

• Severity: low (CVSS 3.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-07-21 · updated 2026-06-16

Description

Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.

Affected products

• horde imp: 2.0, 2.2, 2.2.1, 2.2.2, 2.2.3, 2.2.4 (+1)

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
• http://online.securityfocus.com/archive/1/198495
• http://online.securityfocus.com/archive/1/198495
• http://online.securityfocus.com/archive/1/198495
• http://online.securityfocus.com/archive/1/198495
• http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt
• http://www.debian.org/security/2001/dsa-073
• http://www.iss.net/security_center/static/6906.php
• http://www.securityfocus.com/bid/3083
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
• http://online.securityfocus.com/archive/1/198495
• http://online.securityfocus.com/archive/1/198495

Get alerted when CVE-2001-1258 or the next vulnerability affects your stack