|
Horde IMP Message Attachment Symbolic Link Vulnerability
Solution: (courtesy Jarno Huuskonen <Jarno.Huuskonen@uku.fi>) --- Solution: Upgrade to imp-2.2.5 and use the 'upload_tmp_dir' directive (php.ini) to define a directory where uploaded files should go (see imp/docs/SECURITY for more information). Note: Imp-2.2.5 uses the PHP tempnam function for creating temporary files. With PHP versions earlier than 4.0.3? the tempnam function doesn't use mkstemp (so it has a race condition) so upgrading to PHP-4.0.5 or patching PHP-3.0.18 to use mkstemp is advisable[4]. --- Horde IMP 2.0
Horde IMP 2.2
Horde IMP 2.2.1
Horde IMP 2.2.2
Horde IMP 2.2.3
Horde IMP 2.2.4
|
|
|
Privacy Statement |
