Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary
Title New horde3 packages fix several vulnerabilities
Informations
Name DSA-1033 First vendor Publication 2006-04-12
Vendor Debian Last vendor Modification 2006-04-12
Severity (Vendor) N/A Revision 1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score 7.5 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems:

CVE-2005-4190

Several Cross-Site-Scripting vulnerabilities have been discovered in the "share edit window".

CVE-2006-1260

Null characters in the URL parameter bypass a sanity check, which allowed remote attackers to read arbitrary files, which allowed information disclosure.

CVE-2006-1491

User input in the help viewer was passed unsanitised to the eval() function, which allowed injection of arbitrary web code.

The old stable distribution (woody) doesn't contain horde3 packages.

For the stable distribution (sarge) these problems have been fixed in version 3.0.4-4sarge3.

For the unstable distribution (sid) these problems have been fixed in version 3.1.1-1.

We recommend that you upgrade your horde3 package.

Original Source

Url : http://www.debian.org/security/2006/dsa-1033

CWE : Common Weakness Enumeration

% Id Name
50 % CWE-94 Failure to Control Generation of Code ('Code Injection')
50 % CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 12
Application 33
Application 43

OpenVAS Exploits

Date Description
2008-09-24 Name : Gentoo Security Advisory GLSA 200604-02 (horde)
File : nvt/glsa_200604_02.nasl
2008-09-04 Name : FreeBSD Ports: horde, horde-php5
File : nvt/freebsd_horde4.nasl
2008-09-04 Name : FreeBSD Ports: horde, horde-php5
File : nvt/freebsd_horde5.nasl
2008-01-17 Name : Debian Security Advisory DSA 1033-1 (horde3)
File : nvt/deb_1033_1.nasl
2008-01-17 Name : Debian Security Advisory DSA 1034-1 (horde2)
File : nvt/deb_1034_1.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
24322 Horde Help Viewer Arbitrary Code Execution

23918 Horde go.php url Parameter Arbitrary File Access

Horde contains a flaw that may lead to an unauthorized information disclosure. The issue is due to go.php not properly sanitizing user input supplied to the 'url' variable. Embedding a NULL character within the 'url' variable enables an attacker to control the variable passed to readfile() function leading to the reading of any file on the file system with the privileges of the web server resulting in a loss of confidentiality.
21607 Horde Framework CSV Import Multiple Field Arbitrary Script Execution

21606 Horde Framework Multiple Field XSS

Snort® IPS/IDS

Date Description
2014-01-10 horde help module arbitrary command execution attempt
RuleID : 6403 - Revision : 14 - Type : SERVER-WEBAPP

Nessus® Vulnerability Scanner

Date Description
2007-10-17 Name : The remote openSUSE host is missing a security update.
File : suse_horde-1600.nasl - Type : ACT_GATHER_INFO
2006-10-14 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1033.nasl - Type : ACT_GATHER_INFO
2006-10-14 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1034.nasl - Type : ACT_GATHER_INFO
2006-05-13 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_2db97aa6be8111da9b820050bf27ba24.nasl - Type : ACT_GATHER_INFO
2006-04-08 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200604-02.nasl - Type : ACT_GATHER_INFO
2006-03-29 Name : The remote web server contains a PHP application that allows execution of arb...
File : horde_help_viewer_code_exec.nasl - Type : ACT_ATTACK
2006-03-15 Name : The remote web server contains a PHP application that is affected by an infor...
File : horde_url_file_disclosure.nasl - Type : ACT_ATTACK

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2014-02-17 11:25:40
  • Multiple Updates