PT-2004-3467 · Phpgroupware · Phpgroupware

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2576

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpGroupWare version 0.9.16.000

Description The issue concerns the failure to create .htaccess files for authorization checks on users' home-directory files. This allows remote attackers to access sensitive information from these files.

Recommendations For phpGroupWare version 0.9.16.000, consider manually creating .htaccess files to enable authorization checks for access to users' home-directory files as a temporary workaround. Restrict access to sensitive files in the home directory to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-2576

Affected Products

Phpgroupware

References · 4

• 🔥 https://savannah.gnu.org/bugs/?func=detailitem&item_id=8359 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2576 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19195 · Note
• http://osvdb.org/7617 · Note