NVD

Id
58042  
Name
CVE-2007-6018  
Description
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2008-01-10  
Modified Date
2009-09-15  
Seq
2007-6018  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
297354 58042 CVE-2007-6018 http://cvs.horde.org/diff.php/groupware/docs/groupware/CHANGES?r1=1.17&r2=1.17.2.1&ty=h  View
297355 58042 CVE-2007-6018 http://cvs.horde.org/diff.php/groupware/docs/webmail/CHANGES?r1=1.12&r2=1.12.2.1&ty=h  View
297356 58042 CVE-2007-6018 [announce] 20080109 Horde 3.1.6 (final)  View
297357 58042 CVE-2007-6018 [announce] 20080109 Horde Groupware 1.0.3 (final)  View
297358 58042 CVE-2007-6018 [announce] 20080110 Horde Groupware Webmail Edition 1.0.4 (final)  View
297359 58042 CVE-2007-6018 SUSE-SR:2009:007  View
297360 58042 CVE-2007-6018 DSA-1470  View
297361 58042 CVE-2007-6018 27223  View
297362 58042 CVE-2007-6018 horde-impgroupware-filter-security-bypass(39595)  View
297363 58042 CVE-2007-6018 https://bugzilla.redhat.com/show_bug.cgi?id=428625  View
297364 58042 CVE-2007-6018 FEDORA-2008-2040  View
297365 58042 CVE-2007-6018 FEDORA-2008-2087  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48554 JVNDB-2008-003864 IMP Webmail Client などにおける任意の電子メールメッセージを削除される脆弱性 IMP Webmail Client、Horde Application Framework および Horde Groupware Webmail Edition は、不特定の HTTP リクエストを適切に検証しないため、(1) 任意の電子メールメッセージを削除される (2) 削除された電子メールを "パージ" される脆弱性が存在します。 CVE-2007-6018 29373 CVE-2007-6018 58042 5.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003864.html 2008-01-10 2012-09-25 View