PT-2010-1633 · Kolab · Kolab Server+1

Published 2010-04-27 · Updated 2010-06-05 · CVE-2009-4824

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kolab Webclient versions prior to 1.2.0 Kolab Server versions prior to 2.2.3

Description The issue is related to an unspecified vulnerability in the image upload form, allowing attackers to have an unspecified impact.

Recommendations For Kolab Webclient versions prior to 1.2.0, update to version 1.2.0 or later. For Kolab Server versions prior to 2.2.3, update to version 2.2.3 or later.

Fix

Related Identifiers

CVE-2009-4824

DSA-1897-1

Affected Products

Kolab Server

Kolab Webclient

References · 8

• http://secunia.com/advisories/37918 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4824 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2010:108 · Vendor Advisory
• http://vupen.com/english/advisories/2010/1245 · Note
• http://osvdb.org/61301 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4824 · Note
• http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt · Note
• http://securityfocus.com/bid/37465 · Note