Vulnerability in IMP Webmail Client and Horde Groupware Webmail Edition
CVE-2007-6018

Currently unrated

Key Information:

Vendor: Horde
Status: Horde; Framework; Groupware Webmail Edition; Imp
Vendor: CVE Published:; 11 January 2008

What is CVE-2007-6018?

The IMP Webmail Client and associated Horde products have a vulnerability that lacks proper validation of HTTP requests. This issue allows remote attackers to manipulate email messages, including deleting arbitrary emails through a crafted numeric ID or purging already deleted messages via specially designed email content. Organizations using these applications should take immediate action to apply patches and enhance their security measures against this exploit.

References

http://secunia.com/advisories/29186

third-party-advisoryx_refsource_SECUNIA

https://bugzilla.redhat.com/show_bug.cgi?id=428625

x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2009...

vendor-advisoryx_refsource_SUSE

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 11, 2008
Vulnerability Reserved
Nov 19, 2007

CVE-2007-6018 Data

JSON