Published: 17/03/2009 Updated: 22/09/2011

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 646

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Directory traversal vulnerability in framework/Image/Image.php in Horde prior to 3.2.4 and 3.3.3 and Horde Groupware prior to 1.1.5 allows remote malicious users to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian horde 3.2.2
debian horde 3.3
debian horde groupware 1.1.1
debian horde groupware 1.1.2
debian horde 3.2
debian horde 3.2.3
debian horde groupware 1.1.3
debian horde groupware 1.1.4
debian horde 3.3.1
debian horde 3.3.2

Several vulnerabilities have been found in horde3, the horde web application framework The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0932 Gunnar Wrobel discovered a directory traversal vulnerability, which allows attackers to include and execute arbitrary local files via the driver parameter in Horde ...

# Exploit Title: Horde Horde_Image::factory driver Argument Local File Inclusion # Google Dork: intitle:horde # Date: 10-02-2011 # Author: skysbsb # Software Link: wwwhordeorg/download/ # Version: Horde 332 # Tested on: linux # CVE : CVE-2009-0932 The original disclosure was done by Gunnar Wrobel from Horde team it was found in a code ...

Horde version 332 suffers from a local file inclusion vulnerability ...

accuknox-policy-temp A community-owned library of Kubernetes System and Network policies AccuKnox Templates overview Please follow the hierarchy while contribution ├── cves │ ├── network │ │ └── cnp-CVE-2009-0932yaml │ ├── system │ │ └── ksp-CVE-2021-29156yaml │ │ └── ksp-CVE-2021-29442yaml ├──

Community curated list of System and Network policy templates for the KubeArmor and Cilium

Policies Libraries A community-owned library of Kubernetes System and Network policies Policy Templates overview Please follow the hierarchy while contribution ├── mitre │ ├── network │ │ └── cnp-firewall-world-blockyaml │ ├── system │ │ └── ksp-postgres-allowyaml │ │ └── ksp-privilage-pod-blockyaml �

CWE-22 http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5 http://secunia.com/advisories/33695 http://lists.horde.org/archives/announce/2009/000482.html http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5 http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503 http://lists.horde.org/archives/announce/2009/000483.html http://www.securityfocus.com/bid/33491 http://lists.horde.org/archives/announce/2009/000486.html http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html http://secunia.com/advisories/34418 http://secunia.com/advisories/34609 http://securityreason.com/securityalert/8077 https://nvd.nist.gov https://www.debian.org/security/./dsa-1765 https://www.exploit-db.com/exploits/16154/https://github.com/kubearmor/policy-templates

CVE-2009-0932

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect