lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, which allows remote authenticated users to modify address data via a modified object_id parameter to edit.php, as demonstrated by modifying a personal address book entry when there is write access to a shared address book.

- Bug #428625 - CVE-2007-6018 horde: input validation     vulnerabilities

  - Bug #432027 - CVE-2008-0807 turba: insufficient access     checks

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora host is missing one or more security updates :

imp-4.1.6-1.fc7 :

  - Mon Jan 14 2008 Brandon Holbrook <fedora at     theholbrooks.org> 4.1.6-1

    - Upgraded to 4.1.6

    - Sat Oct 20 2007 Brandon Holbrook <fedora at       theholbrooks.org> 4.1.5-1

    - Upgraded to 4.1.5

horde-3.1.6-1.fc7 :

  - Fri Jan 11 2008 Brandon Holbrook <fedora at     theholbrooks.org> 3.1.6-1

    - Update to 3.1.6

    - Sat Oct 20 2007 Brandon Holbrook <fedora at       theholbrooks.org> 3.1.5-1

    - Update to 3.1.5

turba-2.1.7-1.fc7 :

  - Tue Feb 26 2008 Jan ONDREJ (SAL) <ondrejj(at)salstar.sk>     2.1.7-1

    - Update to upstream: CVE-2008-0807: turba: insufficient       access checks

    - Mon Jan 14 2008 Brandon Holbrook <fedora at       theholbrooks.org> 2.1.6-1

    - Upgraded to 2.1.6

    - Sat Oct 20 2007 Brandon Holbrook <fedora at       theholbrooks.org> 2.1.5-1

    - Upgraded to 2.1.5

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Peter Paul Elfferich discovered that turba2, a contact management component for horde framework, did not correctly check access rights before allowing users to edit addresses. This could result in valid users being able to alter private address records.

ID	Name	Product	Family	Severity
31317	Fedora 8 : horde-3.1.6-1.fc8 / imp-4.1.6-1.fc8 / turba-2.1.7-1.fc8 (2008-2087)	Nessus	Fedora Local Security Checks	medium
31311	Fedora 7 : horde-3.1.6-1.fc7 / imp-4.1.6-1.fc7 / turba-2.1.7-1.fc7 (2008-2040)	Nessus	Fedora Local Security Checks	medium
31151	Debian DSA-1507-1 : turba2 - programming error	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2008-0807

high

Tenable Plugins

medium

medium

medium