CVE-2009-0030 Auth bypass in n/a
Authenticated users can access other users' data due to a flawed Red Hat patch causing session cookie collisions in SquirrelMail.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-0030?
CVE-2009-0030 is a medium-severity authentication bypass vulnerability in Squirrelmail Squirrelmail, published on 21 Jan 2009. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663.
Weakness: CWE-287
Which versions are affected by CVE-2009-0030?
It affects 1 product.
Products include Squirrelmail Squirrelmail.
How do I fix CVE-2009-0030?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2009-0030 being exploited?
There is no known exploitation of CVE-2009-0030 in the wild and no public exploit code.
Other vulnerabilities in Squirrelmail Squirrelmail
Sources
Also known as GHSA-8r42-w2m4-wwh4.