Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-7219

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2008-7219
Last Modified 05 Apr 2011 12:00:00
Published 13 Sep 2009 06:30:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-7219

Summary

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.

Vulnerable Systems

Application

  • Horde Groupware 1.0

  • Horde Groupware 1.0.1

  • Horde Groupware 1.0.2

  • Horde Groupware 1.1

  • Horde Groupware Webmail Edition 1.0

  • Horde Groupware Webmail Edition 1.0.2

  • Horde Groupware Webmail Edition 1.0.3

  • Horde Groupware Webmail Edition 1.1

  • Horde Kronolith H3 2.1

  • Horde Kronolith H3 2.1.1

  • Horde Kronolith H3 2.1.2

  • Horde Kronolith H3 2.1.3

  • Horde Kronolith H3 2.1.4

  • Horde Kronolith H3 2.1.5

  • Horde Kronolith H3 2.1.6

  • Horde Kronolith H3 2.2

  • Horde Mnemo H3 2.1

  • Horde Mnemo H3 2.1.1

  • Horde Mnemo H3 2.2

  • Horde Nag H3 2.1

  • Horde Nag H3 2.1.1

  • Horde Nag H3 2.1.2

  • Horde Nag H3 2.1.3

  • Horde Nag H3 2.2


References

BID - 27217

MLIST - [announce] 20080206 Horde Groupware Webmail Edition 1.1-RC2

MLIST - [announce] 20080206 Horde Groupware 1.1-RC2

MLIST - [announce] 20080122 Kronolith H3 (2.2-RC2)

MLIST - [announce] 20080122 Mnemo H3 (2.2-RC2)

MLIST - [announce] 20080122 Nag H3 (2.2-RC2)

MLIST - [announce] 20080110 Horde Groupware Webmail Edition 1.0.4 (final)

MLIST - [announce] 20080109 Horde Groupware 1.0.3 (final)

MLIST - [announce] 20080109 Mnemo H3 (2.1.2) (final)

MLIST - [announce] 20080109 Nag H3 (2.1.4) (final)

MLIST - [announce] 20080109 Kronolith H3 (2.1.7) (final)

FEDORA - FEDORA-2008-2212

SECUNIA - 28382


Last Updated: 27 May 2016 10:49:30