Horde Application Framework Account Hijacking Vulnerability
BID:8399
Info
Horde Application Framework Account Hijacking Vulnerability
| Bugtraq ID: | 8399 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 12 2003 12:00AM |
| Updated: | Aug 12 2003 12:00AM |
| Credit: | Discovery is credited to Vincenzo 'puccio' Ciaglia <[email protected]>. |
| Vulnerable: |
Horde Project Horde 2.2.3 Horde Project Horde 2.2.1 Horde Project Horde 2.2 Horde Project Horde 2.1 Horde Project Horde 2.0 Horde Project Horde 1.2.8 Horde Project Horde 1.2.7 Horde Project Horde 1.2.6 Horde Project Horde 1.2.5 Horde Project Horde 1.2.4 Horde Project Horde 1.2.3 Horde Project Horde 1.2.2 Horde Project Horde 1.2.1 Horde Project Horde 1.2 |
| Not Vulnerable: |
Horde Project Horde 2.2.4 -RC1 |
Discussion
Horde Application Framework Account Hijacking Vulnerability
The Horde Application Framework is prone to a vulnerability that may allow remote attackers to hijack mail account. This can reportedly be exploited via a malicious link in an e-mail.
The Horde Application Framework is prone to a vulnerability that may allow remote attackers to hijack mail account. This can reportedly be exploited via a malicious link in an e-mail.
Exploit / POC
Horde Application Framework Account Hijacking Vulnerability
There is no exploit required.
There is no exploit required.
References
Horde Application Framework Account Hijacking Vulnerability
References:
References:
- Pandora Homepage (Pandora FMS Team)
- PCL-0001: Remote Vulnerability in HORDE MTA (Vincenzo 'puccio' Ciaglia
- Re: PCL-0001: Remote Vulnerability in HORDE MTA < 2.2.4 ("Ricardo J. Ulisses Filho"