CVE-2001-1044: Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document r...

Security readout for executives and security teams

CVE-2001-1044 is an old Basilix Webmail information disclosure issue. Certain application files were placed where the web server could serve them directly, potentially revealing sensitive data such as MySQL usernames and passwords. Business urgency depends on whether any legacy Basilix Webmail instance is still internet-accessible. Exposure is likely limited to legacy Basilix Webmail deployments, especially version 0.9.7beta, where non-public class or include files remain web-accessible under the document root. Treat as a legacy exposure check. Prioritize if Basilix Webmail is internet-facing or connected to sensitive mail or database systems; otherwise handle during legacy asset cleanup. Mitigation focus: Inventory any Basilix Webmail deployments and confirm whether they remain publicly reachable.; Move non-public class and include files outside the web document root.; Configure the web server to deny direct access to sensitive application file types..

Prepared

Jul 1, 2026, 08:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.