NVD

Id
62223  
Name
CVE-2006-3549  
Description
services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via (1) http, (2) https, and (3) ftp URL in the url parameter, which is requested from the server.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-12  
Modified Date
2011-03-07  
Seq
2006-3549  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322366 62223 CVE-2006-3549 http://lists.horde.org/archives/announce/2006/000287.html  View
322367 62223 CVE-2006-3549 http://lists.horde.org/archives/announce/2006/000288.html  View
322368 62223 CVE-2006-3549 http://moritz-naumann.com/adv/0011/hordemulti/0011.txt  View
322369 62223 CVE-2006-3549 1229  View
322370 62223 CVE-2006-3549 1016442  View
322371 62223 CVE-2006-3549 DSA-1406  View
322372 62223 CVE-2006-3549 SUSE-SR:2006:019  View
322373 62223 CVE-2006-3549 20060705 Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues  View
322374 62223 CVE-2006-3549 18845  View
322375 62223 CVE-2006-3549 ADV-2006-2694  View

Related JVN