Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Gentoo: 202310-01 Urgent Notice on Session Hijacking in Horde

gentoo
Calendar Grey September 1, 2003
Dist Gentoo Esm H88
A security flaw within Gentoo's Horde application mandates prompt user intervention to maintain the integrity of the system.
An attacker could send an email to the victim who ago use of HORDE MTAin order to push it to visit a website

Summary


- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200309-02.1
- - ---------------------------------------------------------------------

- - ---------------------------------------------------------------------

This advisory contains the correct values for VERSIONS AFFECTED and
FIXED VERSION

SOLUTION

It is recommended that all Gentoo Linux users who are running
net-www/horde upgrade to horde-2.2.4_rc2 as follows:

emerge sync
emerge horde
emerge clean

- - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at - - ---------------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory remote access horde urgent notice session hijacking

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

� � � � � PACKAGE : horde
� � � � � SUMMARY : session hijacking
� � � � � � �DATE : 2003-09-01 14:38 UTC
� � � � � EXPLOIT : remote
VERSIONS AFFECTED : =horde-2.2.4_rc2
� � � � � � � CVE :

Topics%20covered

Topics Covered

security advisory remote access horde urgent notice session hijacking

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Related News

Your message here