CVE-2009-0030

Name of the Vulnerable Software and Affected Versions SquirrelMail version 1.4.8

Description The issue allows remote authenticated users to access other users' folder lists and configuration data under certain circumstances by using the standard webmail.php interface. This occurs because a Red Hat patch for SquirrelMail sets the same SQMSESSID cookie value for all sessions.

Recommendations For SquirrelMail version 1.4.8, consider disabling the use of the SQMSESSID cookie until a proper fix is applied to prevent unauthorized access to user data. Restrict access to the webmail.php interface to minimize the risk of exploitation.