PT-2006-4424 · Horde · Horde Application Framework

Moritz Naumann · Published 2006-07-13 · Updated 2018-10-18 · CVE-2006-3549

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Horde Application Framework versions 3.0.0 through 3.0.10 Horde Application Framework versions 3.1.0 through 3.1.1

Description The issue allows remote attackers to perform Web tunneling attacks and use the server as a proxy via http, https, and ftp URL in the url parameter. This is due to the improper restriction of the image proxy capability in the services/go.php file.

Recommendations For Horde Application Framework versions 3.0.0 through 3.0.10, restrict access to the services/go.php file to minimize the risk of exploitation. For Horde Application Framework versions 3.1.0 through 3.1.1, avoid using the url parameter in the services/go.php file until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-3549

DSA-1406-1

Affected Products

Horde Application Framework

References · 15

• 🔥 http://securityfocus.com/bid/18845 · Exploit
• 🔥 http://securitytracker.com/id?1016442 · Exploit
• 🔥 http://moritz-naumann.com/adv/0011/hordemulti/0011.txt · Exploit
• http://novell.com/linux/security/advisories/2006_19_sr.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3549 · Security Note
• http://debian.org/security/2007/dsa-1406 · Vendor Advisory
• http://lists.horde.org/archives/announce/2006/000287.html · Patch
• http://secunia.com/advisories/27565 · Note
• http://secunia.com/advisories/20954 · Note
• http://secunia.com/advisories/21459 · Note
• http://securityreason.com/securityalert/1229 · Note
• http://vupen.com/english/advisories/2006/2694 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3549 · Note
• http://securityfocus.com/archive/1/439255/100/0/threaded · Note
• http://lists.horde.org/archives/announce/2006/000288.html · Note