Test ID:	1.3.6.1.4.1.25623.1.0.60213
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1470-1)
Summary:	The remote host is missing an update for the Debian 'horde3' package(s) announced via the DSA-1470-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'horde3' package(s) announced via the DSA-1470-1 advisory. Vulnerability Insight: Ulf Harnhammar discovered that the HTML filter of the Horde web application framework performed insufficient input sanitising, which may lead to the deletion of emails if a user is tricked into viewing a malformed email inside the Imp client. This update also provides backported bugfixes to the cross-site scripting filter and the user management API from the latest Horde release 3.1.6. The old stable distribution (sarge) is not affected. An update to Etch is recommended, though. For the stable distribution (etch), this problem has been fixed in version 3.1.3-4etch2. We recommend that you upgrade your horde3 package. Affected Software/OS: 'horde3' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6018 BugTraq ID: 27223 http://www.securityfocus.com/bid/27223 Debian Security Information: DSA-1470 (Google Search) http://www.debian.org/security/2008/dsa-1470 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00888.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00927.html http://secunia.com/secunia_research/2007-102/advisory/ http://lists.horde.org/archives/announce/2008/000360.html http://lists.horde.org/archives/announce/2008/000365.html http://lists.horde.org/archives/announce/2008/000366.html http://secunia.com/advisories/28020 http://secunia.com/advisories/28546 http://secunia.com/advisories/29184 http://secunia.com/advisories/29185 http://secunia.com/advisories/29186 http://secunia.com/advisories/34418 SuSE Security Announcement: SUSE-SR:2009:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html XForce ISS Database: horde-impgroupware-filter-security-bypass(39595) https://exchange.xforce.ibmcloud.com/vulnerabilities/39595
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.