Horde Framework and IMP Cleanup Cron Script Arbitrary File Deletion Vulnerability

info
discussion
exploit
solution
references

Horde Framework and IMP Cleanup Cron Script Arbitrary File Deletion Vulnerability

Solution:
The vendor has released version 3.1.4 to address this issue. Please see the references for more information.

Horde Framework 3.0

Horde horde-3.1.4.tar.gz
ftp://ftp.horde.org/pub/horde/horde-3.1.4.tar.gz

Horde Framework 3.0.4

Horde horde-3.1.4.tar.gz
ftp://ftp.horde.org/pub/horde/horde-3.1.4.tar.gz

Horde Framework 3.1.3

Horde horde-3.1.4.tar.gz
ftp://ftp.horde.org/pub/horde/horde-3.1.4.tar.gz