First published: Sun Mar 19 2006(Updated: )
Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Horde Horde | =2.2.7 | |
Horde Horde | =3.0.6 | |
Horde Horde | =1.2.8 | |
Horde Horde | =2.2.3 | |
Horde Horde | =1.2 | |
Horde Horde | =1.2.1 | |
Horde Horde | =2.2.1 | |
Horde Horde | =1.2.6 | |
Horde Horde | =3.0 | |
Horde Horde | =2.2.4 | |
Horde Horde | =3.0.3 | |
Horde Horde | =2.0 | |
Horde Horde | =3.0.4 | |
Horde Horde | =1.2.5 | |
Horde Horde | =3.0.1 | |
Horde Horde | =3.0.4_rc2 | |
Horde Horde | =1.2.3 | |
Horde Horde | =2.2.9 | |
Horde Horde | =1.2.2 | |
Horde Horde | =2.2.8 | |
Horde Horde | =3.0.8 | |
Horde Horde | =3.0.9 | |
Horde Horde | =3.0.2 | |
Horde Horde | =3.0.4_rc1 | |
Horde Horde | =2.2.6 | |
Horde Horde | =2.1 | |
Horde Horde | =2.2.4_rc1 | |
Horde Horde | =2.2 | |
Horde Horde | =2.1.3 | |
Horde Horde | =1.2.4 | |
Horde Horde | =1.2.7 | |
Horde Horde | =3.0.7 | |
Horde Horde | =2.2.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.