[Запросы #9533] Horde IMP Remote Information Disclosure Vulnerability

[bugs at horde.org]

НЕ ОТВЕЧАЙТЕ НА ЭТО СООБЩЕНИЕ. ЭТОТ EMAIL АДРЕС НЕ ПРОСМАТРИВАЕТСЯ.

Ticket URL: http://bugs.horde.org/ticket/9533
------------------------------------------------------------------------------
  Ticket           | 9533
  Created By       | amolchanov at parallels.com
  Сводка           | Horde IMP Remote Information Disclosure Vulnerability
  Тема             | IMP
  Версия           | Git master
  Тип              | Bug
  Состояние        | Unconfirmed
  Приоритет        | 2. Medium
  Milestone        |
  Patch            |
  Владелец         |
------------------------------------------------------------------------------


amolchanov at parallels.com (2011-01-24 09:29) написал:

http://www.securityfocus.com/bid/40294/info

Horde IMP is prone to a remote information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive  
information that may lead to further attacks.

This issue affects unknown versions of Horde IMP. This BID will be  
updated when more details become available.

For more information need read "TEHTRI-SA-2010-010 - Horde 0-day  
(TEHTRI-Security) " :
http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf#page=74