FUDForum Tree View Access Validation Vulnerability

Bugtraq ID:	14556
Class:	Input Validation Error
CVE:	CVE-2005-2600
Remote:	Yes
Local:	No
Published:	Aug 12 2005 12:00AM
Updated:	Jul 12 2009 05:06PM
Credit:	Alexander Heidenreich is credited with the discovery of this vulnerability.
Vulnerable:	PHPGroupWare PHPGroupWare 0.9.16 RC3 PHPGroupWare PHPGroupWare 0.9.16 RC2 PHPGroupWare PHPGroupWare 0.9.16 RC1 PHPGroupWare PHPGroupWare 0.9.16 .006 PHPGroupWare PHPGroupWare 0.9.16 .005 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 PHPGroupWare PHPGroupWare 0.9.16 .003 + Gentoo Linux PHPGroupWare PHPGroupWare 0.9.16 .002 PHPGroupWare PHPGroupWare 0.9.16 .000 PHPGroupWare PHPGroupWare 0.9.14 .007 PHPGroupWare PHPGroupWare 0.9.14 .006 PHPGroupWare PHPGroupWare 0.9.14 .005 PHPGroupWare PHPGroupWare 0.9.14 .004 PHPGroupWare PHPGroupWare 0.9.14 .003 PHPGroupWare PHPGroupWare 0.9.14 .002 PHPGroupWare PHPGroupWare 0.9.14 .001 PHPGroupWare PHPGroupWare 0.9.14 PHPGroupWare PHPGroupWare 0.9.13 - Debian Linux 2.2 PHPGroupWare PHPGroupWare 0.9.12 - MySQL AB MySQL 3.23.36 - MySQL AB MySQL 3.23.34 - MySQL AB MySQL 3.23.31 - PostgreSQL PostgreSQL 6.5.3 - PostgreSQL PostgreSQL 6.3.2 Ilia Alshanetsky FUDForum 2.6.15 Gentoo Linux eGroupWare eGroupWare 1.0 .0.007 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 + Gentoo Linux
Not Vulnerable:	PHPGroupWare PHPGroupWare 0.9.16 .007

FUDForum Tree View Access Validation Vulnerability

FUDforum is prone to an access-validation vulnerability. This issue is due to a failure in the application to perform proper access validation before granting access to private forums.

An attacker can exploit this vulnerability to obtain posts from private forums. This may result in a loss of confidentiality. Information obtained may also be used in further attacks.

This issue is reported to affect FUDforum version 2.6.15; earlier versions may also be vulnerable.

Note that this issue may be triggered only if the 'Tree View' feature is enabled.

FUDForum Tree View Access Validation Vulnerability

No exploit is required.

FUDForum Tree View Access Validation Vulnerability

Solution:

Please see the referenced advisories for more information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]


PHPGroupWare PHPGroupWare 0.9.12

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.13

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.14 .004

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.14 .006

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.14 .005

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.14

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.14 .003

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.14 .001

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.14 .002

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.14 .007

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.16 .006

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.16 RC1

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.16 .005

• Debian phpgroupware-addressbook_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-addressbook_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-admin_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-admin_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-bookmarks_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-bookmarks_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-calendar_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-calendar_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-chat_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-chat_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-comic_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-comic_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-core_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-core_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-developer-tools_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-developer-tools_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-dj_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-dj_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-eldaptir_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-eldaptir_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-email_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-email_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-etemplate_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-etemplate_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-felamimail_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-felamimail_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-filemanager_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-filemanager_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-folders_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-folders_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-forum_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-forum_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-ftp_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-ftp_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-fudforum_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-fudforum_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-headlines_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-headlines_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-hr_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-hr_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-img_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-img_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-infolog_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-infolog_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-manual_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-manual_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-messenger_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-messenger_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-news-admin_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-news-admin_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-nntp_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-nntp_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-notes_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-notes_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-phonelog_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-phonelog_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-phpbrain_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-phpbrain_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-phpgwapi_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-phpgwapi_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-phpsysinfo_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-phpsysinfo_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-polls_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-polls_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-preferences_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-preferences_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-projects_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-projects_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-qmailldap_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-qmailldap_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-registration_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-registration_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-setup_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-setup_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-sitemgr_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-sitemgr_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-skel_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-skel_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-soap_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-soap_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-stocks_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-stocks_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-todo_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-todo_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-tts_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-tts_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-wiki_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-wiki_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware-xmlrpc_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re-xmlrpc_0.9.16.005-3.sarge2_all.deb


• Debian phpgroupware_0.9.16.005-3.sarge2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/phpgroupware/phpgroupwa re_0.9.16.005-3.sarge2_all.deb


• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.16 RC3

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.16 .002

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.16 .000

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.16 RC2

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

PHPGroupWare PHPGroupWare 0.9.16 .003

• PhPGroupWare phpgroupware-0.9.16.007.tar.gz
  http://prdownloads.sourceforge.net/phpgroupware/phpgroupware-0.9.16.00 7.tar.gz

eGroupWare eGroupWare 1.0 .0.007

• Debian egroupware-bookmarks_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-b ookmarks_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-calendar_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-c alendar_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-comic_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-c omic_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-core_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-c ore_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-developer-tools_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-d eveloper-tools_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-email_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-e mail_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-emailadmin_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-e mailadmin_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-etemplate_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-e template_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-felamimail_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f elamimail_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-filemanager_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f ilemanager_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-forum_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f orum_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-ftp_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f tp_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-fudforum_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-f udforum_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-headlines_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-h eadlines_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-infolog_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-i nfolog_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-jinn_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-j inn_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-ldap_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-l dap_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-manual_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-m anual_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-messenger_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-m essenger_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-news-admin_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-n ews-admin_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-phpbrain_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p hpbrain_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-phpldapadmin_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p hpldapadmin_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-phpsysinfo_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p hpsysinfo_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-polls_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p olls_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-projects_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-p rojects_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-registration_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-r egistration_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-sitemgr_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-s itemgr_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-stocks_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-s tocks_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-tts_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-t ts_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware-wiki_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware-w iki_1.0.0.007-2.dfsg-2sarge4_all.deb


• Debian egroupware_1.0.0.007-2.dfsg-2sarge4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/egroupware/egroupware_1 .0.0.007-2.dfsg-2sarge4_all.deb

FUDForum Tree View Access Validation Vulnerability

References:

• FUDforum Homepage (FUDforum)