PT-2009-2685 · Horde · Kronolith H3+6

Jan Schneider · Publicado 2009-09-13 · Atualizado 2017-08-17 · CVE-2008-7218

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Horde versions 3.1 through 3.1.5 Horde versions 3.2 before 3.2-RC2 Turba H3 versions 2.1 through 2.1.5 Turba H3 versions 2.2 before 2.2-RC2 Kronolith H3 versions 2.1 through 2.1.6 Kronolith H3 versions 2.2 before 2.2-RC2 Nag H3 versions 2.1 through 2.1.3 Nag H3 versions 2.2 before 2.2-RC2 Mnemo H3 versions 2.1 through 2.1.1 Mnemo H3 versions 2.2 before 2.2-RC2 Horde Groupware versions 1.0 through 1.0.2 Horde Groupware versions 1.1 before 1.1-RC2 Groupware Webmail Edition versions 1.0 through 1.0.3 Groupware Webmail Edition versions 1.1 before 1.1-RC2

Description The issue concerns an unspecified vulnerability in the Horde API, affecting various Horde products. The impact and attack vectors of this issue are unknown.

Recommendations For Horde versions 3.1 through 3.1.5, update to version 3.1.6 or later. For Horde versions 3.2 before 3.2-RC2, update to version 3.2-RC2 or later. For Turba H3 versions 2.1 through 2.1.5, update to version 2.1.6 or later. For Turba H3 versions 2.2 before 2.2-RC2, update to version 2.2-RC2 or later. For Kronolith H3 versions 2.1 through 2.1.6, update to version 2.1.7 or later. For Kronolith H3 versions 2.2 before 2.2-RC2, update to version 2.2-RC2 or later. For Nag H3 versions 2.1 through 2.1.3, update to version 2.1.4 or later. For Nag H3 versions 2.2 before 2.2-RC2, update to version 2.2-RC2 or later. For Mnemo H3 versions 2.1 through 2.1.1, update to version 2.1.2 or later. For Mnemo H3 versions 2.2 before 2.2-RC2, update to version 2.2-RC2 or later. For Horde Groupware versions 1.0 through 1.0.2, update to version 1.0.3 or later. For Horde Groupware versions 1.1 before 1.1-RC2, update to version 1.1-RC2 or later. For Groupware Webmail Edition versions 1.0 through 1.0.3, update to version 1.0.4 or later. For Groupware Webmail Edition versions 1.1 before 1.1-RC2, update to version 1.1-RC2 or later.

Correção

Identificadores relacionados

CVE-2008-7218

DSA-1897-1

Produtos afetados

Groupware Webmail Edition

Horde

Horde Groupware

Kronolith H3

Mnemo H3

Nag H3

Turba H3

Referências · 21

• http://secunia.com/advisories/28382 · Aviso do Fabricante
• http://lists.horde.org/archives/announce/2008/000377.html · Correção
• http://lists.horde.org/archives/announce/2008/000376.html · Correção
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00176.html · Aviso do Fabricante
• http://lists.horde.org/archives/announce/2008/000369.html · Correção
• http://lists.horde.org/archives/announce/2008/000371.html · Correção
• http://lists.horde.org/archives/announce/2008/000374.html · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7218 · Nota
• http://lists.horde.org/archives/announce/2008/000365.html · Correção
• http://osvdb.org/42775 · Nota
• http://lists.horde.org/archives/announce/2008/000360.html · Correção
• http://securityfocus.com/bid/27217 · Nota
• http://lists.horde.org/archives/announce/2008/000367.html · Correção
• http://lists.horde.org/archives/announce/2008/000363.html · Correção
• http://lists.horde.org/archives/announce/2008/000362.html · Correção