CVE-2010-2813: Squirrelmail

Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days.

functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preferences files.

Affected products

• Squirrelmail Squirrelmail: up to and including 1.4.20; version 1.4 only; version 1.4.0 only; version 1.4.0-r1 only; version 1.4.0_rc1 only; version 1.4.0_rc2a only; …

Published 2010-08-19. Last modified 2026-06-16.