Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable.

Upgrade to 3.3.6 - Fixes a lot of security bugs

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been found in horde3, the horde web application framework. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-3237     It has been discovered that horde3 is prone to     cross-site scripting attacks via crafted number     preferences or inline MIME text parts when using     text/plain as MIME type. For lenny this issue was     already fixed, but as an additional security precaution,     the display of inline text was disabled in the     configuration file.

  - CVE-2009-3701     It has been discovered that the horde3 administration     interface is prone to cross-site scripting attacks due     to the use of the PHP_SELF variable. This issue can only     be exploited by authenticated administrators.

  - CVE-2009-4363     It has been discovered that horde3 is prone to several     cross-site scripting attacks via crafted data:text/html     values in HTML messages.

This update of horde fixes :

  - CVE-2009-3236: CVSS v2 Base Score: 5.0: Overwrite     arbitrary files and execute PHP code

  - CVE-2009-3237: CVSS v2 Base Score: 5.0: Cross-Site     Scripting (XSS)

  - CVE-2009-3701: CVSS v2 Base Score: 4.3: Cross-Site     Scripting (XSS)

  - CVE-2009-4363: CVSS v2 Base Score: 4.3: Cross-Site     Scripting (XSS)

ID	Name	Product	Family	Severity
47404	Fedora 13 : horde-3.3.6-1.fc13 (2010-5563)	Nessus	Fedora Local Security Checks	medium
47395	Fedora 12 : horde-3.3.6-1.fc12 (2010-5520)	Nessus	Fedora Local Security Checks	medium
47390	Fedora 11 : horde-3.3.6-1.fc11 (2010-5483)	Nessus	Fedora Local Security Checks	medium
44831	Debian DSA-1966-1 : horde3 - insufficient input sanitising	Nessus	Debian Local Security Checks	medium
44607	openSUSE Security Update : horde (horde-1947)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2009-3701

medium

Tenable Plugins

medium

medium

medium

medium

medium