PT-2002-2745 · Horde · Horde Imp

Published 2002-12-31 · Updated 2024-08-08 · CVE-2002-2024

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Horde IMP version 2.2.7

Description The issue allows remote attackers to obtain the full web root pathname via specific HTTP requests. This can be achieved by requesting certain files, including poppassd.php3, login.php3?reason=chpass2, spelling.php3, and ldap.search.php3?ldap serv=nonsense, which leak the information in error messages.

Recommendations For Horde IMP version 2.2.7, consider restricting access to the mentioned files (poppassd.php3, login.php3, spelling.php3, and ldap.search.php3) to minimize the risk of exploitation. As a temporary workaround, avoid using the ldap serv parameter in the ldap.search.php3 endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-219

Related Identifiers

CVE-2002-2024

Affected Products

Horde Imp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-2024 · Security Note
• https://t.me/cvenotify/89927 · Telegram Post
• http://iss.net/security_center/static/8768.php · Note
• http://bugs.horde.org/show_bug.cgi?id=916 · Note
• http://securityfocus.com/bid/4445 · Note