Test ID:	1.3.6.1.4.1.25623.1.0.103926
Category:	Web application abuses
Title:	Horde 3.1.x <= 5.1.1 RCE Vulnerability - Active Check
Summary:	Horde is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Horde is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: Horde could allow a remote attacker to execute arbitrary code on the system, caused by the improper validation of _formvars form input. Vulnerability Impact: Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in denial of service conditions. Affected Software/OS: Horde version 3.1.x through 5.1.1. Solution: Updates are available. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1691 Debian Security Information: DSA-2853 (Google Search) http://www.debian.org/security/2014/dsa-2853 http://seclists.org/oss-sec/2014/q1/156 http://seclists.org/oss-sec/2014/q1/153 http://seclists.org/oss-sec/2014/q1/169
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.