Test ID:	1.3.6.1.4.1.25623.1.0.61616
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: horde-base
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: horde-base Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3823 20080910 [oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS) http://www.securityfocus.com/archive/1/496182/100/0/threaded 31110 http://www.securityfocus.com/bid/31110 31842 http://secunia.com/advisories/31842 31959 http://secunia.com/advisories/31959 4245 http://securityreason.com/securityalert/4245 ADV-2008-2548 http://www.vupen.com/english/advisories/2008/2548 DSA-1642 http://www.debian.org/security/2008/dsa-1642 [horde-announce] 20080910 [SECURITY] Horde 3.2.2 (final) http://marc.info/?l=horde-announce&m=122104360019867&w=2 [oss-security] 20080910 [oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS) http://www.openwall.com/lists/oss-security/2008/09/10/1 horde-mime-xss(45030) https://exchange.xforce.ibmcloud.com/vulnerabilities/45030 http://ocert.org/patches/2008-012/MIME.patch http://www.ocert.org/advisories/ocert-2008-012.html Common Vulnerability Exposure (CVE) ID: CVE-2008-3824 31107 http://www.securityfocus.com/bid/31107 47996 http://osvdb.org/47996 [horde-announce] 20080910 Horde 3.1.9 (final) http://marc.info/?l=horde-announce&m=122103888111491&w=2 horde-htmlmessages-xss(45031) https://exchange.xforce.ibmcloud.com/vulnerabilities/45031 http://blog.liip.ch/missed-case-in-externalinput-php-resulting-in-viable-xss-attacks.html http://ocert.org/patches/2008-012/Text_Filter.31.patch http://ocert.org/patches/2008-012/Text_Filter.patch http://www.phpmyfaq.de/advisory_2008-09-11.php
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.