Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes.

Upgrade to 3.3.6 - Fixes a lot of security bugs

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200909-14 (Horde: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Horde:
    Gunnar Wrobel reported an input sanitation and directory traversal     flaw in framework/Image/Image.php, related to the 'Horde_Image driver     name' (CVE-2009-0932).
    Gunnar Wrobel reported that data sent     to horde/services/portal/cloud_search.php is not properly sanitized     before used in the output (CVE-2009-0931).
    It was reported     that data sent to framework/Text_Filter/Filter/xss.php is not properly     sanitized before used in the output (CVE-2008-5917).
    Horde Passwd: David Wharton reported that data sent via the 'backend'     parameter to passwd/main.php is not properly sanitized before used in     the output (CVE-2009-2360).
    Horde IMP: Gunnar Wrobel reported that data sent to smime.php, pgp.php,     and message.php is not properly sanitized before used in the output     (CVE-2009-0930).
  Impact :

    A remote authenticated attacker could exploit these vulnerabilities to     execute arbitrary PHP files on the server, or disclose the content of     arbitrary files, both only if the file is readable to the web server. A     remote authenticated attacker could conduct Cross-Site Scripting     attacks. NOTE: Some Cross-Site Scripting vectors are limited to the     usage of Microsoft Internet Explorer.
  Workaround :

    There is no known workaround at this time.

Version update to horde 3.1.9 fixes a cross-site-scripting (XSS) issue (CVE-2008-5917) and an include file problem (CVE-2009-0932).

Several vulnerabilities have been found in horde3, the horde web application framework. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-0932     Gunnar Wrobel discovered a directory traversal     vulnerability, which allows attackers to include and     execute arbitrary local files via the driver parameter     in Horde_Image.

  - CVE-2008-3330     It was discovered that an attacker could perform a     cross-site scripting attack via the contact name, which     allows attackers to inject arbitrary html code. This     requires that the attacker has access to create     contacts.

  - CVE-2008-5917     It was discovered that the horde XSS filter is prone to     a cross-site scripting attack, which allows attackers to     inject arbitrary html code. This is only exploitable     when Internet Explorer is used.

ID	Name	Product	Family	Severity
47404	Fedora 13 : horde-3.3.6-1.fc13 (2010-5563)	Nessus	Fedora Local Security Checks	medium
47395	Fedora 12 : horde-3.3.6-1.fc12 (2010-5520)	Nessus	Fedora Local Security Checks	medium
47390	Fedora 11 : horde-3.3.6-1.fc11 (2010-5483)	Nessus	Fedora Local Security Checks	medium
40961	GLSA-200909-14 : Horde: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
39985	openSUSE Security Update : horde (horde-657)	Nessus	SuSE Local Security Checks	medium
36119	Debian DSA-1765-1 : horde3 - Multiple vulnerabilities	Nessus	Debian Local Security Checks	medium
36005	openSUSE 10 Security Update : horde (horde-6099)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2008-5917

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium