CVE-2007-6018: Input Validation
Common Vulnerabilities and Exposures assigned an identifier CVE-2007-6018 to the following vulnerability:
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.
References:
http://secunia.com/secuniaresearch/2007-102/advisory/ http://www.securityfocus.com/bid/27223 http://secunia.com/advisories/28020
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6018?
CVE-2007-6018 is considered a high severity vulnerability due to its potential to allow remote attackers to delete arbitrary emails.
How do I fix CVE-2007-6018?
To fix CVE-2007-6018, update to the latest versions of IMP Webmail Client, Horde Application Framework, or Horde Groupware Webmail Edition that address this issue.
What are the affected software versions of CVE-2007-6018?
The affected software versions for CVE-2007-6018 include IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3.
Can CVE-2007-6018 lead to data loss?
Yes, CVE-2007-6018 can lead to data loss due to its ability to delete emails remotely.
Is authentication required to exploit CVE-2007-6018?
No, exploitation of CVE-2007-6018 does not require authentication, making it particularly concerning.