CVE-2007-1474
First published: Fri Mar 16 2007(Updated: )
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Horde | =3.0.0 | |
| Horde | =3.0.4 | |
| Horde | =3.1.3 | |
| Horde | =2.0 | |
| Horde | =2.2 | |
| Horde | =2.2.1 | |
| Horde | =2.2.2 | |
| Horde | =2.2.3 | |
| Horde | =2.2.4 | |
| Horde | =2.2.5 | |
| Horde | =2.2.6 | |
| Horde | =2.2.7 | |
| Horde | =2.2.8 | |
| Horde | =2.3 | |
| Horde | =3.0 | |
| Horde | =3.1 | |
| Horde | =3.1.2 | |
| Horde | =3.2 | |
| Horde | =3.2.1 | |
| Horde | =3.2.2 | |
| Horde | =3.2.3 | |
| Horde | =3.2.4 | |
| Horde | =3.2.5 | |
| Horde | =3.2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=489
- http://lists.horde.org/archives/announce/2007/000315.html
- http://www.securityfocus.com/bid/22985
- http://www.securitytracker.com/id?1017784
- http://www.securitytracker.com/id?1017785
- http://www.debian.org/security/2007/dsa-1406
- http://secunia.com/advisories/27565
- http://www.vupen.com/english/advisories/2007/0965
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32997
Frequently Asked Questions
What is the severity of CVE-2007-1474?
CVE-2007-1474 is considered a moderate severity vulnerability as it allows local users to delete arbitrary files.
How do I fix CVE-2007-1474?
To fix CVE-2007-1474, upgrade to Horde Application Framework version 3.1.4 or later.
Which versions of Horde are affected by CVE-2007-1474?
CVE-2007-1474 affects Horde IMP versions 2.0 to 2.2.8 and 3.0 to 3.2.6, along with Horde Application Framework versions 3.0.0 to 3.1.3.
What is the impact of CVE-2007-1474?
The impact of CVE-2007-1474 allows local users to potentially gain elevated privileges by deleting arbitrary files.
Who can exploit CVE-2007-1474?
CVE-2007-1474 can be exploited by local users who have access to the cleanup cron script.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/horde
- canonical/horde
- version/horde/3.0.0
- version/horde/3.0.4
- version/horde/3.1.3
- version/horde/2.0
- version/horde/2.2
- version/horde/2.2.1
- version/horde/2.2.2
- version/horde/2.2.3
- version/horde/2.2.4
- version/horde/2.2.5
- version/horde/2.2.6
- version/horde/2.2.7
- version/horde/2.2.8
- version/horde/2.3
- version/horde/3.0
- version/horde/3.1
- version/horde/3.1.2
- version/horde/3.2
- version/horde/3.2.1
- version/horde/3.2.2
- version/horde/3.2.3
- version/horde/3.2.4
- version/horde/3.2.5
- version/horde/3.2.6