NVD

Id
42346  
Name
CVE-2012-0209  
Description
Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers to execute arbitrary PHP code.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-25  
Modified Date
2012-09-26  
Seq
2012-0209  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213631 42346 CVE-2012-0209 http://dev.horde.org/h/jonah/stories/view.php?channel_id=1&id=155  View
213632 42346 CVE-2012-0209 http://eromang.zataz.com/2012/02/15/cve-2012-0209-horde-backdoor-analysis/  View
213633 42346 CVE-2012-0209 [horde-announce] 20120213 [SECURITY] Remote execution backdoor after server hack (CVE-2012-0209)  View
213634 42346 CVE-2012-0209 http://packetstormsecurity.org/files/109874/Horde-3.3.12-Backdoor-Arbitrary-PHP-Code-Execution.html  View
213635 42346 CVE-2012-0209 https://bugzilla.redhat.com/show_bug.cgi?id=790877  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28891 JVNDB-2012-004598 複数の Horde Project 製品における任意の PHP コードを実行される脆弱性 2011 年 11 月から 2012 年 2 月の間に FTP により提供された Horde、Horde Groupware および Horde Groupware Webmail Edition は、templates/javascript/open_calendar.js に外部からの改ざん (トロイの木馬) が含まれているため、任意の PHP コードを実行される脆弱性が存在します。 CVE-2012-0209 53447 CVE-2012-0209 42346 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004598.html 2012-02-13 2012-09-27 View