CVE-2012-2124

🗓️ 18 Jan 2013 11:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 76 Views🌐 WEB

functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preference files

Reporter	Title	Published	Views	Family All 24
Tenable Nessus	CentOS 5 : squirrelmail (CESA-2013:0126)	17 Jan 201300:00	–	nessus
Tenable Nessus	MiracleLinux 3 : squirrelmail-1.4.8-21.AXS3 (AXSA:2013-274:01)	16 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 5 : squirrelmail (ELSA-2013-0126)	12 Jul 201300:00	–	nessus
Tenable Nessus	RHEL 5 : squirrelmail (RHSA-2013:0126)	8 Jan 201300:00	–	nessus
Tenable Nessus	RHEL 4 : squirrelmail (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : squirrelmail on SL5.x (noarch) (20130108)	17 Jan 201300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2012-2124	4 Mar 202500:00	–	nessus
Cent OS	squirrelmail security update	9 Jan 201320:54	–	centos
Cvelist	CVE-2012-2124	18 Jan 201311:00	–	cvelist
Oracle linux	squirrelmail security and bug fix update	11 Jan 201300:00	–	oraclelinux

NVD

Node

squirrelmail squirrelmailMatch-

redhat enterprise_linuxMatch4

redhat enterprise_linuxMatch5

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2013-0126.html
secunia	www.secunia.com/advisories/51730
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2012/04/20/22

Parameter	Position	Path	Description	CWE
password	request body	functions/imap_general.php	Improper handling of 8-bit characters in passwords leading to DoS via numerous IMAP login attempts	CWE-399

29 Apr 2026 01:13Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25

EPSS0.00769

CWE-399