Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-6018
HistorySep 05, 2008 - 12:00 a.m.

CVE-2007-6018

2008-09-0500:00:00
ubuntu.com
ubuntu.com
7

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.007 Low

EPSS

Percentile

79.7%

IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde
Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP
requests, which allows remote attackers to (1) delete arbitrary e-mail
messages via a modified numeric ID or (2) โ€œpurgeโ€ deleted emails via a
crafted email message.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchhorde3<ย 3.1.6-1UNKNOWN
ubuntu8.10noarchhorde3<ย 3.1.6-1UNKNOWN
ubuntu9.04noarchhorde3<ย 3.1.6-1UNKNOWN
ubuntu9.10noarchhorde3<ย 3.1.6-1UNKNOWN

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.007 Low

EPSS

Percentile

79.7%