Horde Application Framework and Horde IMP index.php cross-site scripting
| horde-index-xss (28411) |  Medium Risk |
Description:
Horde Application Framework and Horde IMP are vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the index.php script. A remote attacker could exploit this vulnerability using an HTTP GET request in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials or to perform phishing attacks.
*CVSS:
| Base Score: | 2.8 |
| Access Vector: | Remote |
| Access Complexity: | High |
| Authentication: | Not Required |
| Confidentiality Impact: | Partial |
| Integrity Impact: | None |
| Availability Impact: | None |
| Temporal Score: | 2.4 |
| Exploitability: | High |
| Remediation Level: | Official-Fix |
| Report Confidence: | Confirmed |
Consequences:
Gain Access
Remedy:
For Horde Application Framework:
Upgrade to the latest version of Horde Application Framework (version 3.1.3 or later), available from the Horde Application Framework Web site. See References.
For Horde IMP:
Upgrade to the latest version of IMP (version 4.1.3 or later), available from the Horde IMP Web site. See References.
For other distributions:
Apply the appropriate update for your system. See References.
References:
- Full-Disclosure Mailing List, Wed Aug 16 2006 - 08:51:00 CDT: [scip_Advisory 2456] Horde Framework and Horde IMP /index.php cross site referencing.
- Horde Application Framework Web site: The Horde Application Framework.
- Horde IMP Web site: IMP Webmail Client.
- BID-19557: Horde Products GETURL Parameter Cross-Site Scripting Vulnerability
- CVE-2006-4256: index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka cross-site referencing. NOTE: some sources have referred to this issue as XSS, but it is different than classic XSS.
- DSA-1406: horde3 -- several vulnerabilities
- SA21500: Horde Phishing and Cross-Site Scripting Vulnerabilities
- SECTRACK ID: 1016713: Horde Application Framework Input Validation Holes in `index.php` and IMP`s `search.php` Permit Cross-Site Scripting Attacks
- VUPEN/ADV-2006-3309: Horde Application Framework Cross Site Scripting and Frameset Phishing Vulnerabilities
Platforms Affected:
- Debian Debian Linux 3.1
- Debian Debian Linux 4.0
- Horde Horde 3.0.4 - 3.1.2
- Horde IMP prior to 4.1.3
Reported:
Aug 16, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net
* According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall IBM be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.