NVD

Id
53658  
Name
CVE-2007-1474  
Description
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-16  
Modified Date
2011-03-07  
Seq
2007-1474  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271874 53658 CVE-2007-1474 20070315 Horde Project Cleanup Script Arbitrary File Deletion Vulnerability  View
271875 53658 CVE-2007-1474 [announce] 20070314 Horde 3.1.4 (final)  View
271876 53658 CVE-2007-1474 DSA-1406  View
271877 53658 CVE-2007-1474 22985  View
271878 53658 CVE-2007-1474 1017784  View
271879 53658 CVE-2007-1474 1017785  View
271880 53658 CVE-2007-1474 ADV-2007-0965  View
271881 53658 CVE-2007-1474 horde-cron-file-deletion(32997)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54827 JVNDB-2007-003519 Horde Project Horde における任意のファイルを削除される脆弱性 Horde Project Horde、IMP および Horde Application Framework の cleanup cron スクリプトは、引数の挿入により、任意のファイルを削除される、および権限を取得される脆弱性が存在します。 CVE-2007-1474 24829 CVE-2007-1474 53658 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003519.html 2007-03-14 2012-09-25 View