1827 matches found
[SECURITY] [DSA 1519-1] New horde3 packages fix information disclosure
------------------------------------------------------------------------ Debian Security Advisory DSA-1519-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 15, 2008 http://www.debian.org/security/faq -...
DSA-1519-1 horde3 - information disclosure
Bulletin has no description...
[SECURITY] Fedora 7 Update: horde-3.1.7-1.fc7
The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...
[SECURITY] Fedora 8 Update: horde-3.1.7-1.fc8
The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...
Fedora 8 : kronolith-2.1.7-1.fc8 (2008-2221)
Fix privilege escalation in Horde API. Fix missing ownership validation on share changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 7 : horde-3.1.7-1.fc7 (2008-2406)
Fix arbitrary file inclusion through abuse of the theme preference. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 8 : horde-3.1.7-1.fc8 (2008-2362)
Fix arbitrary file inclusion through abuse of the theme preference. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
horde316-inclusion.txt
Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...
CVE-2008-1284
Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte in the theme name...
CVE-2008-1284
Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte in the theme name...
CVE-2008-1284
Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte in the theme name...
CVE-2008-1284
CVE-2008-1284 affects Horde 3.1.6, Groupware up to 1.0.5, and Groupware Webmail Edition up to 1.0.6. The vulnerability is a directory traversal via ../ and a null byte in the theme name, allowing remote authenticated users to read and execute arbitrary files. The NVD entry lists a CVSSv2 base sco...
Horde Webmail file inclusion proof of concept & patch.
Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...
[SECURITY] Fedora 8 Update: kronolith-2.1.7-1.fc8
Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...
Fedora 7 : kronolith-2.1.7-1.fc7 (2008-2212)
Fix privilege escalation in Horde API. Fix missing ownership validation on share changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
[SECURITY] Fedora 7 Update: kronolith-2.1.7-1.fc7
Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...
Fedora 8 : horde-3.1.6-1.fc8 / imp-4.1.6-1.fc8 / turba-2.1.7-1.fc8 (2008-2087)
Bug 428625 - CVE-2007-6018 horde: input validation vulnerabilities - Bug 432027 - CVE-2008-0807 turba: insufficient access checks Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...
Fedora 7 : horde-3.1.6-1.fc7 / imp-4.1.6-1.fc7 / turba-2.1.7-1.fc7 (2008-2040)
The remote Fedora host is missing one or more security updates : imp-4.1.6-1.fc7 : - Mon Jan 14 2008 Brandon Holbrook 4.1.6-1 - Upgraded to 4.1.6 - Sat Oct 20 2007 Brandon Holbrook 4.1.5-1 - Upgraded to 4.1.5 horde-3.1.6-1.fc7 : - Fri Jan 11 2008 Brandon Holbrook 3.1.6-1 - Update to 3.1.6 - Sat O...
[SECURITY] Fedora 8 Update: turba-2.1.7-1.fc8
Turba is the Horde contact management application, which allows access to and storage of personal contacts including name, email address, phone number, and other easily customizable fields. Turba integrates with IMP Horde's webmail application as its address book. The Horde Project writes web...
[SECURITY] Fedora 8 Update: horde-3.1.6-1.fc8
The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...