PT-2006-2276 · Horde · Horde Application Framework

Paul Craig · Published 2006-03-19 · Updated 2018-10-18 · CVE-2006-1260

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Horde Application Framework version 3.0.9

Description The issue allows remote attackers to read arbitrary files by exploiting a null character in the url parameter in the "services/go.php" endpoint. This bypasses a sanity check, potentially leading to unauthorized access to sensitive information.

Recommendations For Horde Application Framework version 3.0.9, consider restricting access to the "services/go.php" endpoint until a patch is available. As a temporary workaround, avoid using the url parameter with null characters to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1260

DSA-1033-1

DSA-1034-1

Affected Products

Horde Application Framework

References · 20

• 🔥 https://exploit-db.com/exploits/4850 · Exploit
• 🔥 http://osvdb.org/23918 · Exploit
• 🔥 http://secunia.com/advisories/19246 · Exploit
• http://debian.org/security/2006/dsa-1033 · Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043657.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1034 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1260 · Security Note
• http://securityfocus.com/bid/17117 · Patch
• http://securitytracker.com/id?1015771 · Patch
• http://gentoo.org/security/en/glsa/glsa-200604-02.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_04_28.html · Vendor Advisory
• http://secunia.com/advisories/19528 · Note
• http://secunia.com/advisories/19897 · Note
• http://vupen.com/english/advisories/2006/0959 · Note
• http://securityreason.com/securityalert/590 · Note