CVE-2009-0932: Path Traversal
Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the HordeImage driver name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0932?
CVE-2009-0932 is considered a critical vulnerability as it allows remote attackers to execute arbitrary local files.
How do I fix CVE-2009-0932?
To resolve CVE-2009-0932, you should upgrade to Horde versions 3.2.4, 3.3.3 or later, or Horde Groupware version 1.1.5 or later.
What types of attacks can be executed due to CVE-2009-0932?
CVE-2009-0932 allows directory traversal attacks that can lead to remote code execution on affected systems.
Which versions of Horde are affected by CVE-2009-0932?
CVE-2009-0932 affects Horde versions prior to 3.2.4 and 3.3.3, as well as Horde Groupware versions prior to 1.1.5.
What is the impact of CVE-2009-0932 on user data?
The impact of CVE-2009-0932 may include unauthorized access to sensitive data and the possibility of system compromise.