CVE-2010-3694

Executive Summary

Informations
Name	CVE-2010-3694	First vendor Publication	2010-11-09
Vendor	Cve	Last vendor Modification	2011-07-11

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3694

CWE : Common Weakness Enumeration

id	Name
CWE-352	Cross-Site Request Forgery (CSRF)

CPE : Common Platform Enumeration

Type	Description	Count
Application	Horde Horde Application Framework cpe:/a:horde:horde_application_framework:3.3.8 cpe:/a:horde:horde_application_framework:3.3.7 cpe:/a:horde:horde_application_framework:3.3.6 cpe:/a:horde:horde_application_framework:3.3.5 cpe:/a:horde:horde_application_framework:3.3.4 cpe:/a:horde:horde_application_framework:3.3.4:rc1 cpe:/a:horde:horde_application_framework:3.3.3 cpe:/a:horde:horde_application_framework:3.3.2 cpe:/a:horde:horde_application_framework:3.3.1 cpe:/a:horde:horde_application_framework:3.3:rc1 cpe:/a:horde:horde_application_framework:3.3 cpe:/a:horde:horde_application_framework:3.2.5 cpe:/a:horde:horde_application_framework:3.2.4 cpe:/a:horde:horde_application_framework:3.2.3 cpe:/a:horde:horde_application_framework:3.2.2 cpe:/a:horde:horde_application_framework:3.2.1 cpe:/a:horde:horde_application_framework:3.2 cpe:/a:horde:horde_application_framework:3.2:rc1 cpe:/a:horde:horde_application_framework:3.2:rc3 cpe:/a:horde:horde_application_framework:3.2:alpha cpe:/a:horde:horde_application_framework:3.2:rc2 cpe:/a:horde:horde_application_framework:3.2:rc4 cpe:/a:horde:horde_application_framework:3.1.9 cpe:/a:horde:horde_application_framework:3.1.8 cpe:/a:horde:horde_application_framework:3.1.7 cpe:/a:horde:horde_application_framework:3.1.6 cpe:/a:horde:horde_application_framework:3.1.5 cpe:/a:horde:horde_application_framework:3.1.4:rc1 cpe:/a:horde:horde_application_framework:3.1.4 cpe:/a:horde:horde_application_framework:3.1.3 cpe:/a:horde:horde_application_framework:3.1.2 cpe:/a:horde:horde_application_framework:3.1.1 cpe:/a:horde:horde_application_framework:3.1 cpe:/a:horde:horde_application_framework:3.1:rc1 cpe:/a:horde:horde_application_framework:3.1:rc3 cpe:/a:horde:horde_application_framework:3.1:rc2 cpe:/a:horde:horde_application_framework:3.0.9 cpe:/a:horde:horde_application_framework:3.0.8 cpe:/a:horde:horde_application_framework:3.0.7 cpe:/a:horde:horde_application_framework:3.0.6 cpe:/a:horde:horde_application_framework:3.0.6:rc1 cpe:/a:horde:horde_application_framework:3.0.5 cpe:/a:horde:horde_application_framework:3.0.5:rc1 cpe:/a:horde:horde_application_framework:3.0.5:rc2 cpe:/a:horde:horde_application_framework:3.0.4 cpe:/a:horde:horde_application_framework:3.0.4:rc1 cpe:/a:horde:horde_application_framework:3.0.4:rc2 cpe:/a:horde:horde_application_framework:3.0.3:rc1 cpe:/a:horde:horde_application_framework:3.0.3 cpe:/a:horde:horde_application_framework:3.0.2 cpe:/a:horde:horde_application_framework:3.0.12 cpe:/a:horde:horde_application_framework:3.0.11 cpe:/a:horde:horde_application_framework:3.0.10 cpe:/a:horde:horde_application_framework:3.0.1 cpe:/a:horde:horde_application_framework:3.0:rc3 cpe:/a:horde:horde_application_framework:3.0:rc1 cpe:/a:horde:horde_application_framework:3.0 cpe:/a:horde:horde_application_framework:3.0:beta cpe:/a:horde:horde_application_framework:3.0:alpha cpe:/a:horde:horde_application_framework:3.0:rc2 cpe:/a:horde:horde_application_framework:2.2.9 cpe:/a:horde:horde_application_framework:2.2.8 cpe:/a:horde:horde_application_framework:2.2.7 cpe:/a:horde:horde_application_framework:2.2.6 cpe:/a:horde:horde_application_framework:2.2.6:rc1 cpe:/a:horde:horde_application_framework:2.2.5 cpe:/a:horde:horde_application_framework:2.2.4 cpe:/a:horde:horde_application_framework:2.2.3 cpe:/a:horde:horde_application_framework:2.2.2 cpe:/a:horde:horde_application_framework:2.2.1 cpe:/a:horde:horde_application_framework:2.2 cpe:/a:horde:horde_application_framework:2.1 cpe:/a:horde:horde_application_framework:2.0:rc1 cpe:/a:horde:horde_application_framework:2.0:rc3 cpe:/a:horde:horde_application_framework:2.0 cpe:/a:horde:horde_application_framework:2.0:rc4 cpe:/a:horde:horde_application_framework:1.3.5 cpe:/a:horde:horde_application_framework:1.3.4 cpe:/a:horde:horde_application_framework:1.3.3 cpe:/a:horde:horde_application_framework:1.3.2 cpe:/a:horde:horde_application_framework:1.3.1 cpe:/a:horde:horde_application_framework:1.3.0 cpe:/a:horde:horde_application_framework:1.1.1 cpe:/a:horde:horde_application_framework:1.0.3	84

Open Source Vulnerability Database (OSVDB)

id	Description
69159	Horde Application Framework Preference Form CSRF
65089	Horde Groupware / Horde Groupware Webmail Edition Unspecified CSRF

Internal Sources (Detail)

Source	Url
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=630687
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2010-November/05040... http://lists.fedoraproject.org/pipermail/package-announce/2010-November/05042...
MLIST	http://lists.horde.org/archives/announce/2010/000557.html
SECUNIA	http://secunia.com/advisories/42140

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 23:34:06	Multiple Updates

Type	Count
CPE ID(s)	84
osvdb(s)	2

Related	Severity
DSA-2278	(Medium)

Same Subject	Severity
Login to view 1 more Alert(s)

CVE-2010-3694

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

CPE : Common Platform Enumeration

Open Source Vulnerability Database (OSVDB)

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU