# CVE-2001-1258

## Summary

- **CVE ID:** CVE-2001-1258
- **Severity:** UNKNOWN
- **CVSS Score:** 0.01
- **CWE:** N/A
- **Published:** May 3, 2002
- **Last Modified:** Mar 16, 2026

## Description

Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://www.iss.net/security_center/static/6906.php)
- [CNA](http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410)
- [CNA](http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt)
- [CNA](http://www.debian.org/security/2001/dsa-073)
- [CNA](http://online.securityfocus.com/archive/1/198495)
- [CNA](http://www.securityfocus.com/bid/3083)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.11%
- **EPSS Percentile:** 29.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._