CVE-2006-3549

Description

services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via (1) http, (2) https, and (3) ftp URL in the url parameter, which is requested from the server.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3544

http://www.vupen.com/english/advisories/2006/2694

http://www.securityfocus.com/bid/18845

http://www.securityfocus.com/archive/1/439255/100/0/threaded

http://www.novell.com/linux/security/advisories/2006_19_sr.html

http://www.debian.org/security/2007/dsa-1406

http://securitytracker.com/id?1016442

http://securityreason.com/securityalert/1229

http://secunia.com/advisories/27565

http://secunia.com/advisories/21459

http://secunia.com/advisories/20954

http://moritz-naumann.com/adv/0011/hordemulti/0011.txt

http://lists.horde.org/archives/announce/2006/000288.html

http://lists.horde.org/archives/announce/2006/000287.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS