Horde IMP Encoded Cross-Agent Scripting Vulnerability

Bugtraq ID:	3082
Class:	Input Validation Error
CVE:	CVE-2001-1257
Remote:	Yes
Local:	No
Published:	Jul 21 2001 12:00AM
Updated:	Jul 11 2009 06:56AM
Credit:	This vulnerability was discovered by Nick Cleaton <[email protected]> and submitted to BugTraq on July 21st, 2001 by "Brent J. Nordquist" <[email protected]>.
Vulnerable:	Horde Project IMP 2.2.5 + Caldera OpenLinux Server 3.1 + Horde Project Horde 1.2.5 Horde Project IMP 2.2.4 + Caldera OpenLinux Server 3.1 + Horde Project Horde 1.2.4 Horde Project IMP 2.2.3 + Horde Project Horde 1.2.3 Horde Project IMP 2.2.2 + Horde Project Horde 1.2.2 Horde Project IMP 2.2.1 + Horde Project Horde 1.2.1 Horde Project IMP 2.2 + Horde Project Horde 1.2 Horde Project IMP 2.0 - PHP PHP 4.0.1 pl2 - PHP PHP 4.0.1 - PHP PHP 4.0 0 - PHP PHP 3.0.16
Not Vulnerable:	Horde Project IMP 2.2.6 - Debian Linux 2.2 + Horde Project Horde 1.2.6

Horde IMP Encoded Cross-Agent Scripting Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Horde IMP Encoded Cross-Agent Scripting Vulnerability

References:

• IMP Homepage (Horde.org)