CVE-2012-2124
functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5,...
CVE-2012-2124 is a medium vulnerability (CVSS 5.0) in Redhat Enterprise Linux, published January 18, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. Fixed in squirrelmail 0:1.4.8-21.el5.
functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preference files. NOTE: this issue exists because of an incorrect fix for CVE-2010-2813.
Exploit likelihood
What each source reports
NVD Score used
functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preference files. NOTE: this issue exists because of an incorrect fix for CVE-2010-2813.
- Record
CVE-2012-2124- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preference files. NOTE: this issue exists because of an incorrect fix for CVE-2010-2813.
- Record
CVE-2012-2124- Updated
- 2026-11-02
EUVDEUVD-2012-2126 No score
functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preference files. NOTE: this issue exists because of an incorrect fix for CVE-2010-2813.
- Record
EUVD-2012-2126- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xrcw-cgg9-mj7c No score
functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5,...
functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preference files. NOTE: this issue exists because of an incorrect fix for CVE-2010-2813.
- Record
GHSA-xrcw-cgg9-mj7c- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squirrelmailRed Hat:enterprise_linux:5::client_workstation |
before 0:1.4.8-21.el5 | 0:1.4.8-21.el5 |
squirrelmailRed Hat:enterprise_linux:5::server |
before 0:1.4.8-21.el5 | 0:1.4.8-21.el5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/51730
bugzilla.redhat.com/show_bug.cgi?id=814671
openwall.com/lists/oss-security/2012/04/20/22
rhn.redhat.com/errata/RHSA-2013-0126.html
nvd.nist.gov/vuln/detail/CVE-2012-2124
github.com/advisories/GHSA-xrcw-cgg9-mj7c
Show 15 moreShow less
access.redhat.com/errata/RHSA-2013:0126
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0126.json
cve.org/CVERecord?id=CVE-2012-2124