Podatność CVE-2009-0932

Podatność CVE-2009-0932

Publikacja: 2009-03-17 Modyfikacja: 2012-02-13

Opis:

	Tytuł	Autor	Data
Med.	Horde Horde_Image::factory driver Argument Local File Inclusion	skysbsb	14.02.2011

Typ:

(Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
6.4/10	4.9/10	10/10

Affected software
Debian -> Horde
Debian -> Horde groupware

http://www.securityfocus.com/bid/33491

http://securityreason.com/securityalert/8077

http://secunia.com/advisories/34609

http://secunia.com/advisories/34418

http://secunia.com/advisories/33695

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html

http://lists.horde.org/archives/announce/2009/000486.html

http://lists.horde.org/archives/announce/2009/000483.html

http://lists.horde.org/archives/announce/2009/000482.html

http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503

http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5

http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5