CVE-2012-2124: Red Hat Enterprise Linux

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creation of many preference files. NOTE: this issue exists because of an incorrect fix for CVE-2010-2813.

Affected products

• Red Hat Enterprise Linux: version 4 only; version 5 only
• Squirrelmail Squirrelmail: affected versions not specified

Published 2013-01-18. Last modified 2026-06-16.