PT-2007-2039 · Horde · Horde Groupware+1

Published 2007-01-30 · Updated 2017-07-29 · CVE-2007-0579

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Horde Groupware Webmail Edition versions prior to 1.0 Horde Groupware versions prior to 1.0

Description The issue allows remote attackers to include certain files via unspecified vectors in the calendar component.

Recommendations For Horde Groupware Webmail Edition versions prior to 1.0, update to version 1.0 or later. For Horde Groupware versions prior to 1.0, update to version 1.0 or later.

Fix

Related Identifiers

CVE-2007-0579

Affected Products

Horde Groupware

Horde Groupware Webmail Edition

References · 7

• http://securityfocus.com/bid/22273 · Patch
• http://lists.horde.org/archives/announce/2007/000308.html · Vendor Advisory
• http://lists.horde.org/archives/announce/2007/000309.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0579 · Security Note
• http://vupen.com/english/advisories/2007/0368 · Note
• http://osvdb.org/33083 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31849 · Note