Horde Framework and IMP Cleanup Cron Script Arbitrary File Deletion Vulnerability

Bugtraq ID:	22985
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Mar 15 2007 12:00AM
Updated:	Mar 15 2007 08:34PM
Credit:	The discoverer of this vulnerability wishes to remain anonymous.
Vulnerable:	Horde Project IMP 3.2.6 Horde Project IMP 3.2.1 Horde Project IMP 3.1 Horde Project IMP 3.0 Horde Project IMP 2.3.6 Horde Project IMP 2.2.8 + Conectiva Linux 8.0 + Conectiva Linux 7.0 + Horde Project Horde 1.2.8 Horde Project IMP 2.0.9 Horde Project IMP 2.0.8 Horde Project IMP 2.0 - PHP PHP 4.0.1 pl2 - PHP PHP 4.0.1 - PHP PHP 4.0 0 - PHP PHP 3.0.16 Horde Framework 3.1.3 Horde Framework 3.0.4 Horde Framework 3.0

Not Vulnerable: