CVE-2007-1474

Description

Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/32997

http://www.vupen.com/english/advisories/2007/0965

http://www.securitytracker.com/id?1017785

http://www.securitytracker.com/id?1017784

http://www.securityfocus.com/bid/22985

http://www.debian.org/security/2007/dsa-1406

http://secunia.com/advisories/27565

http://lists.horde.org/archives/announce/2007/000315.html

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=489

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3