PT-2002-2745 · Horde · Horde Imp

CVE-2002-2024 · Publicado 2002-12-31 · Atualizado 2024-08-08

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Horde IMP version 2.2.7

Description The issue allows remote attackers to obtain the full web root pathname via specific HTTP requests. This can be achieved by requesting certain files, including poppassd.php3, login.php3?reason=chpass2, spelling.php3, and ldap.search.php3?ldap serv=nonsense, which leak the information in error messages.

Recommendations For Horde IMP version 2.2.7, consider restricting access to the mentioned files (poppassd.php3, login.php3, spelling.php3, and ldap.search.php3) to minimize the risk of exploitation. As a temporary workaround, avoid using the ldap serv parameter in the ldap.search.php3 endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-219

Identificadores relacionados

CVE-2002-2024

Produtos afetados

Horde Imp

Referências · 5

• https://t.me/cvenotify/89927 · Publicação no Telegram
• http://iss.net/security_center/static/8768.php · Nota
• http://bugs.horde.org/show_bug.cgi?id=916 · Nota
• http://securityfocus.com/bid/4445 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2024 · Nota de Segurança