PT-2004-1682 · Horde · Horde Imp

Publicado 2004-06-23 · Atualizado 2017-07-11 · CVE-2004-0584

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Horde IMP versions 3.2.3 and earlier

Description The issue is related to improper input validation, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability.

Recommendations For Horde IMP versions 3.2.3 and earlier, apply the security fix to properly validate input and prevent the execution of arbitrary scripts.

Correção

Identificadores relacionados

CVE-2004-0584

Produtos afetados

Horde Imp

Referências · 6

• http://horde.org/imp/3.2 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2004-0584 · Nota de Segurança
• http://securityfocus.com/bid/10501 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16357 · Nota
• http://secunia.com/advisories/11805 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200406-11.xml · Aviso do Fabricante