|
Horde Groupware contains backdoor |
|
|
|
Source: H Security - Posted by Dave Wreski
|
Unknown perpetrators infiltrated a backdoor into several installation packages during an attack on groupware provider Horde's FTP server. Horde 3.3.12, Groupware 1.2.10 and the webmail edition of the groupware product are all affected. Horde 4 was not modified. The CVS and Git servers are also unaffected.
Users who have installed a hacked version onto a server have thrown their systems wide open to the hackers – the backdoor enables them to execute arbitrary PHP code. By exploiting additional vulnerabilities, attackers could use this to gain complete control of the server.
Read this full article at H Security
Only registered users can write comments.
Please login or register. Powered by AkoComment! |
