Vulnerability Assessment & Network Security Forums
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.
Vulnerability Assessment Details
Detailed Explanation for this Vulnerability Assessment
The Horde team released version 2.2.6 of IMP (a web based IMAP mail
program) which fixes three security problems. Their release announcement
describes them as follows:
A PHPLIB vulnerability permited a possible hacker to provide a value for the
array element $_PHPLIB[libdir], and thus to get scripts from another
server to load and execute. This vulnerability is remotely
exploitable. (Horde 1.2.x ships with its own customized version of
PHPLIB, which has now been patched to prevent this problem.)
email sent by attacker. (IMP 2.2.x already filters many such
several new ones that were slipping past the filters are
A hostile user that can create a publicly-readable file named
"prefs.lang" somewhere on the Apache/PHP server can cause that file
to be executed as PHP code. The IMP configuration files could thus
be read, the Horde database password used to read and alter the
database used to store contacts and preferences, etc. We do not
believe this is remotely exploitable directly through Apache/PHP/IMP
however, shell access to the server or other means (e.g., FTP) could
be used to create this file.
This has been fixed in version 2:2.2.6-0.potato.1. Please note that you
will also need to upgrade the horde package to the same version.
Solution : http://www.debian.org/security/2001/dsa-073
Network Security Threat Level: High
Networks Security ID: 3082, 3083
Vulnerability Assessment Copyright: This script is (C) 2005 Michel Arboi
|HPE PROLIANT DL380 G9 Gen9 SERVER TWO E5-2660V4 2GHZ 768GB 2 X 240GB SSD
|HPE PROLIANT DL380 G9 Gen9 SERVER TWO E5-2609V3 1.9GHZ 256GB 3 X 1.6TB SSD
|32GB 8x4GB PC3-8500R ECC Server RAM IBM X3850 X5 w/ Expansion Module 46M0001
|DELL POWEREDGE R730 16 BAY TWO E5-2643V3 3.4GHZ 64GB 2 X 600GB SSD H730
No Discussions have been posted on this vulnerability.