PT-2006-4424 · Horde · Horde Application Framework

Moritz Naumann · Publicado 2006-07-13 · Atualizado 2018-10-18 · CVE-2006-3549

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Horde Application Framework versions 3.0.0 through 3.0.10 Horde Application Framework versions 3.1.0 through 3.1.1

Description The issue allows remote attackers to perform Web tunneling attacks and use the server as a proxy via http, https, and ftp URL in the url parameter. This is due to the improper restriction of the image proxy capability in the services/go.php file.

Recommendations For Horde Application Framework versions 3.0.0 through 3.0.10, restrict access to the services/go.php file to minimize the risk of exploitation. For Horde Application Framework versions 3.1.0 through 3.1.1, avoid using the url parameter in the services/go.php file until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-3549

DSA-1406-1

Produtos afetados

Horde Application Framework

Referências · 15

• 🔥 http://securityfocus.com/bid/18845 · Exploit
• 🔥 http://securitytracker.com/id?1016442 · Exploit
• 🔥 http://moritz-naumann.com/adv/0011/hordemulti/0011.txt · Exploit
• http://novell.com/linux/security/advisories/2006_19_sr.html · Aviso do Fabricante
• http://secunia.com/advisories/27565 · Nota
• http://secunia.com/advisories/20954 · Nota
• http://secunia.com/advisories/21459 · Nota
• http://securityreason.com/securityalert/1229 · Nota
• http://vupen.com/english/advisories/2006/2694 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3549 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3549 · Nota
• http://debian.org/security/2007/dsa-1406 · Aviso do Fabricante
• http://lists.horde.org/archives/announce/2006/000287.html · Correção
• http://securityfocus.com/archive/1/439255/100/0/threaded · Nota
• http://lists.horde.org/archives/announce/2006/000288.html · Nota