Vulnerability Description
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Horde | Framework | 3.1.5 |
| Horde | Groupware Webmail Edition | 1.0.3 |
| Horde | Horde | 3.1.5 |
| Horde | Imp | 4.1.5 |
Related Weaknesses (CWE)
References
- http://cvs.horde.org/diff.php/groupware/docs/groupware/CHANGES?r1=1.17&r2=1.17.2
- http://cvs.horde.org/diff.php/groupware/docs/webmail/CHANGES?r1=1.12&r2=1.12.2.1
- http://lists.horde.org/archives/announce/2008/000360.html
- http://lists.horde.org/archives/announce/2008/000365.html
- http://lists.horde.org/archives/announce/2008/000366.html
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
- http://secunia.com/advisories/28020Vendor Advisory
- http://secunia.com/advisories/28546
- http://secunia.com/advisories/29184
- http://secunia.com/advisories/29185
- http://secunia.com/advisories/29186
- http://secunia.com/advisories/34418
- http://secunia.com/secunia_research/2007-102/advisory/Vendor Advisory
- http://www.debian.org/security/2008/dsa-1470
- http://www.securityfocus.com/bid/27223Patch
FAQ
What is CVE-2007-6018?
CVE-2007-6018 is a vulnerability with a CVSS score of 5.8 (MEDIUM). IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrar...
How severe is CVE-2007-6018?
CVE-2007-6018 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-6018?
Check the references section above for vendor advisories and patch information. Affected products include: Horde Framework, Horde Groupware Webmail Edition, Horde Horde, Horde Imp.