Summary
The remote host is missing updates announced in
advisory GLSA 200805-01.
Solution
All Horde Application Framework users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-apps/horde-3.1.7'
All horde-groupware users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-apps/horde-groupware-1.0.5'
All horde-kronolith users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-apps/horde-kronolith-2.1.7'
All horde-mnemo users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-apps/horde-mnemo-2.1.2'
All horde-nag users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-apps/horde-nag-2.1.4'
All horde-webmail users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-apps/horde-webmail-1.0.6'
http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200805-01 http://bugs.gentoo.org/show_bug.cgi?id=212635
http://bugs.gentoo.org/show_bug.cgi?id=213493
Insight
Multiple vulnerabilities in the Horde Application Framework may lead to the execution of arbitrary files, information disclosure, and allow a remote attacker to bypass security restrictions.
Severity
Classification
-
CVE CVE-2008-1284 -
CVSS Base Score: 6.0
AV:N/AC:M/Au:S/C:P/I:P/A:P
Related Vulnerabilities