CVE-2010-2813

functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preferences files.

• squirrelmail squirrelmail (<= 1.4.20) • squirrelmail squirrelmail 1.4 • squirrelmail squirrelmail 1.4.0 • squirrelmail squirrelmail 1.4.0-r1 • squirrelmail squirrelmail 1.4.0 rc1 • squirrelmail squirrelmail 1.4.0 rc2a • squirrelmail squirrelmail 1.4.1 • squirrelmail squirrelmail 1.4.2 • squirrelmail squirrelmail 1.4.2-r1 • squirrelmail squirrelmail 1.4.2-r2 • squirrelmail squirrelmail 1.4.2-r3 • squirrelmail squirrelmail 1.4.2-r4 • squirrelmail squirrelmail 1.4.2-r5 • squirrelmail squirrelmail 1.4.3 • squirrelmail squirrelmail 1.4.3 r3 • squirrelmail squirrelmail 1.4.3 rc1 • squirrelmail squirrelmail 1.4.3a • squirrelmail squirrelmail 1.4.3aa • squirrelmail squirrelmail 1.4.4 • squirrelmail squirrelmail 1.4.4 rc1 • squirrelmail squirrelmail 1.4.5 • squirrelmail squirrelmail 1.4.5 rc1 • squirrelmail squirrelmail 1.4.6 • squirrelmail squirrelmail 1.4.6 cvs • squirrelmail squirrelmail 1.4.6 rc1 • squirrelmail squirrelmail 1.4.7 • squirrelmail squirrelmail 1.4.8 • squirrelmail squirrelmail 1.4.8.4fc6 • squirrelmail squirrelmail 1.4.9 • squirrelmail squirrelmail 1.4.9a • squirrelmail squirrelmail 1.4.10 • squirrelmail squirrelmail 1.4.10a • squirrelmail squirrelmail 1.4.11 • squirrelmail squirrelmail 1.4.12 • squirrelmail squirrelmail 1.4.13 • squirrelmail squirrelmail 1.4.15 • squirrelmail squirrelmail 1.4.15 rc1 • squirrelmail squirrelmail 1.4.15rc1 • squirrelmail squirrelmail 1.4.16 • squirrelmail squirrelmail 1.4.17 • squirrelmail squirrelmail 1.4.18 • squirrelmail squirrelmail 1.4.19 • squirrelmail squirrelmail 1.4 rc1 • squirrelmail squirrelmail 1.44