CVE:CVE-2008-7218
CNNVD:CNNVD-200909-252
Horde的Horde API存在未明漏洞。Turba H3、Kronolith H3、Nag、2Mnemo H3、Horde Groupware、以及Groupware Webmail Edition具有未知影响和攻击向量。
solution:Upgrade horde groupware to a higher version than 1.0,1.0.1,1.0.2,1.1,and avoid the version 1.0,1.0.1,1.0.2,1.1; Upgrade horde groupware_webmail_edition to a higher version than 1.0,1.0.2,1.0.3,1.1,and avoid the version 1.0,1.0.2,1.0.3,1.1; Upgrade horde horde to a higher version than 3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.2,and avoid the version 3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.2; Upgrade horde kronolith_h3 to a higher version than 2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.1.6,2.2,and avoid the version 2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.1.6,2.2; Upgrade horde mnemo_h3 to a higher version than 2.1,2.1.1,2.2,and avoid the version 2.1,2.1.1,2.2; Upgrade horde nag_h3 to a higher version than 2.1,2.1.1,2.1.2,2.1.3,2.2,and avoid the version 2.1,2.1.1,2.1.2,2.1.3,2.2; Upgrade horde turba_h3 to a higher version than 2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.2,2.2:rc1,and avoid the version 2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.2,2.2:rc1