PT-2010-1633 · Kolab · Kolab Server+1

Publicado 2010-04-27 · Atualizado 2010-06-05 · CVE-2009-4824

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kolab Webclient versions prior to 1.2.0 Kolab Server versions prior to 2.2.3

Description The issue is related to an unspecified vulnerability in the image upload form, allowing attackers to have an unspecified impact.

Recommendations For Kolab Webclient versions prior to 1.2.0, update to version 1.2.0 or later. For Kolab Server versions prior to 2.2.3, update to version 2.2.3 or later.

Correção

Identificadores relacionados

CVE-2009-4824

DSA-1897-1

Produtos afetados

Kolab Server

Kolab Webclient

Referências · 8

• http://vupen.com/english/advisories/2010/1245 · Nota
• http://osvdb.org/61301 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4824 · Nota
• http://secunia.com/advisories/37918 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4824 · Nota de Segurança
• http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt · Nota
• http://securityfocus.com/bid/37465 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2010:108 · Aviso do Fabricante