Horde IMP status.php3 cross-site scripting
| imp-status-php3-xss (8769) |  Medium Risk |
Description:
Horde IMP (Internet Messaging Program) is vulnerable to cross-site scripting. A remote attacker could embed malicious JavaScript within a request to the status.php3 script, which would be executed in other IMP user's Web browsers.
Consequences:
Other
Remedy:
Upgrade to the latest version of IMP (2.2.8 or later), available from the Horde Web site. See References.
For Debian GNU/Linux 2.2 (potato):
Upgrade to the latest version of IMP (2.2.6-0.potato.5 or later) or Horde (1.2.6-0.potato.5 or later), as listed in DSA-126-1. See References.
For Caldera OpenLinux Server and Workstation 3.1 and 3.1.1:
Upgrade to the latest version of IMP (2.2.8-1 or later) or Horde (1.2.8-1 or later), as listed in Caldera International, Inc. Security Advisory CSSA-2002-016.1. See References.
For Conectiva Linux containing the imp package:
Upgrade to the latest imp package as listed below. Refer to Conectiva Linux Announcement CLSA-2002:473 for more information. See References.
Conectiva Linux 5.0: 2.2.8-1U50_1cl or later
Conectiva Linux 5.1: 2.2.8-1U51_1cl or later
Conectiva Linux 6.0: 2.2.8-1U60_1cl or later
Conectiva Linux 7.0: 2.2.8-1U70_1cl or later
Conectiva Linux 8.0: 2.2.8-1cl or later
For Conectiva Linux containing the horde package:
Upgrade to the latest imp package as listed below. Refer to Conectiva Linux Announcement CLSA-2002:473 for more information. See References.
Conectiva Linux 5.0: 1.2.8-1U50_1cl or later
Conectiva Linux 5.1: 1.2.8-1U51_1cl or later
Conectiva Linux 6.0: 1.2.8-1U60_1cl or later
Conectiva Linux 7.0: 1.2.8-1U70_1cl or later
For other distributions:
Contact your vendor for upgrade or patch information.
References:
- BugTraq Mailing List, Sat Apr 06 2002 - 09:02:48 CST: IMP 2.2.8 (SECURITY) released.
- Caldera International, Inc. Security Advisory CSSA-2002-016.0: Linux: horde/imp cross scripting vulnerabilities.
- Caldera International, Inc. Security Advisory CSSA-2002-016.1: Linux: REVISED: horde/imp cross scripting vulnerabilities.
- Conectiva Linux Security Announcement CLSA-2002:473: imp -- Cross-site scripting vulnerability.
- Horde Web site: IMP Webmail Client.
- Horde Web site: Horde Bugzilla Bug #916.
- BID-4444: Horde IMP Status.PHP3 Cross-Site Scripting Vulnerability
- CVE-2002-0181: Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter.
- DSA-126: imp -- cross-site scripting
- OSVDB ID: 5345: Horde IMP status.php3 XSS
Platforms Affected:
- Conectiva Linux 5.0
- Conectiva Linux 5.1
- Conectiva Linux 6.0
- Conectiva Linux 7.0
- Conectiva Linux 8.0
- Debian Debian Linux 2.2
- Horde IMP 2.2.7
- SCO Caldera OpenLinux Server 3.1.1
- SCO Caldera OpenLinux Workstation 3.1.1
Reported:
Apr 06, 2002
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net