Detections
Analytics
Horde IMP with MSIE MIME Viewer Email Message XSS
medium Nessus Plugin ID 13857
Language:
Synopsis
The remote web server is running a PHP application that is affected by a cross-site scripting vulnerability.Description
The remote server is running at least one instance of IMP whose version number is 3.2.4 or lower. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to inject arbitrary content, including script, in a specially crafted MIME message. To have an effect, the victim must be using Internet Explorer to access IMP and be using the inline MIME viewer for HTML messages.Note : Nessus has determined the vulnerability exists on the target simply by looking at the version number of IMP installed there, it has not attempted to actually exploit the vulnerability.
Solution
Upgrade to IMP version 3.2.5 or later.See Also
Plugin Details
Severity: Medium
ID: 13857
File Name: imp_html_plus_time_xss.nasl
Version: 1.28
Type: remote
Family: CGI abuses : XSS
Published: 7/30/2004
Updated: 6/4/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Enable CGI Scanning: true
Risk Information
VPR
Risk Factor: Low
Score: 2.7
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:horde:imp
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 8/3/2004
Reference Information
CVE: CVE-2004-1443
BID: 10845