Test Kennung:	1.3.6.1.4.1.25623.1.0.60939
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200805-01 (horde)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200805-01.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200805-01. Vulnerability Insight: Multiple vulnerabilities in the Horde Application Framework may lead to the execution of arbitrary files, information disclosure, and allow a remote attacker to bypass security restrictions. Solution: All Horde Application Framework users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-3.1.7' All horde-groupware users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-groupware-1.0.5' All horde-kronolith users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-kronolith-2.1.7' All horde-mnemo users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-mnemo-2.1.2' All horde-nag users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-nag-2.1.4' All horde-webmail users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/horde-webmail-1.0.6' CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1284 BugTraq ID: 28153 http://www.securityfocus.com/bid/28153 Bugtraq: 20080307 Horde Webmail file inclusion proof of concept & patch. (Google Search) http://www.securityfocus.com/archive/1/489239/100/0/threaded Bugtraq: 20080308 Re: Horde Webmail file inclusion proof of concept & patch. (Google Search) http://www.securityfocus.com/archive/1/489289/100/0/threaded Debian Security Information: DSA-1519 (Google Search) http://www.debian.org/security/2008/dsa-1519 https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00253.html https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00301.html http://security.gentoo.org/glsa/glsa-200805-01.xml http://lists.horde.org/archives/announce/2008/000383.html http://lists.horde.org/archives/announce/2008/000384.html http://lists.horde.org/archives/announce/2008/000382.html http://secunia.com/advisories/29286 http://secunia.com/advisories/29374 http://secunia.com/advisories/29400 http://secunia.com/advisories/30047 http://securityreason.com/securityalert/3726 http://www.vupen.com/english/advisories/2008/0822/references XForce ISS Database: horde-theme-file-include(41054) https://exchange.xforce.ibmcloud.com/vulnerabilities/41054
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.