PT-2009-2685 · Horde · Kronolith H3+6

Jan Schneider

·

Published

2009-09-13

·

Updated

2017-08-17

·

CVE-2008-7218

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Horde versions 3.1 through 3.1.5 Horde versions 3.2 before 3.2-RC2 Turba H3 versions 2.1 through 2.1.5 Turba H3 versions 2.2 before 2.2-RC2 Kronolith H3 versions 2.1 through 2.1.6 Kronolith H3 versions 2.2 before 2.2-RC2 Nag H3 versions 2.1 through 2.1.3 Nag H3 versions 2.2 before 2.2-RC2 Mnemo H3 versions 2.1 through 2.1.1 Mnemo H3 versions 2.2 before 2.2-RC2 Horde Groupware versions 1.0 through 1.0.2 Horde Groupware versions 1.1 before 1.1-RC2 Groupware Webmail Edition versions 1.0 through 1.0.3 Groupware Webmail Edition versions 1.1 before 1.1-RC2
Description The issue concerns an unspecified vulnerability in the Horde API, affecting various Horde products. The impact and attack vectors of this issue are unknown.
Recommendations For Horde versions 3.1 through 3.1.5, update to version 3.1.6 or later. For Horde versions 3.2 before 3.2-RC2, update to version 3.2-RC2 or later. For Turba H3 versions 2.1 through 2.1.5, update to version 2.1.6 or later. For Turba H3 versions 2.2 before 2.2-RC2, update to version 2.2-RC2 or later. For Kronolith H3 versions 2.1 through 2.1.6, update to version 2.1.7 or later. For Kronolith H3 versions 2.2 before 2.2-RC2, update to version 2.2-RC2 or later. For Nag H3 versions 2.1 through 2.1.3, update to version 2.1.4 or later. For Nag H3 versions 2.2 before 2.2-RC2, update to version 2.2-RC2 or later. For Mnemo H3 versions 2.1 through 2.1.1, update to version 2.1.2 or later. For Mnemo H3 versions 2.2 before 2.2-RC2, update to version 2.2-RC2 or later. For Horde Groupware versions 1.0 through 1.0.2, update to version 1.0.3 or later. For Horde Groupware versions 1.1 before 1.1-RC2, update to version 1.1-RC2 or later. For Groupware Webmail Edition versions 1.0 through 1.0.3, update to version 1.0.4 or later. For Groupware Webmail Edition versions 1.1 before 1.1-RC2, update to version 1.1-RC2 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2008-7218
DSA-1897-1

Affected Products

Groupware Webmail Edition
Horde
Horde Groupware
Kronolith H3
Mnemo H3
Nag H3
Turba H3