Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

horde3: cross-site scripting

Package(s):

horde3

CVE #(s):

CVE-2008-3823

Created:

September 22, 2008

Updated:

April 1, 2010

Description:

From the Debian advisory:

Will Drewry discovered that the Horde, allows remote attackers to send an email with a crafted MIME attachment filename attribute to perform cross site scripting.

Alerts:

Fedora	FEDORA-2010-5520	2010-04-01
Fedora	FEDORA-2010-5483	2010-04-01
Debian	DSA-1642-1	2008-09-20

(Log in to post comments)