Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

horde: two remotely exploitable vulnerabilities

Package(s):

horde

CVE #(s):

CVE-2006-1491 CVE-2006-1260

Created:

April 5, 2006

Updated:

April 14, 2006

Description:

Versions of horde prior to 3.1.1 have two vulnerabilities, both of which are remotely exploitable: code execution in the help viewer and an input validation error which could allow read access to arbitrary files.

Alerts:

Debian	DSA-1034-1	2006-04-14
Debian	DSA-1033-1	2006-04-12
Gentoo	200604-02	2006-04-04

(Log in to post comments)