[imp] SECURITY: exploit against out of date Horde versions
    Chuck Hagenbuch 
    chuck at horde.org
       
    Mon May  1 20:55:13 PDT 2006
    
    
  
Folks, if you are running Horde 3.0 or later, and you have not updated  
to the latest security releases, PLEASE go right now to  
http://www.horde.org/, read the top blurb labeled "Security Releases",  
and upgrade to the appropriate version IMMEDIATELY.
If for any reason you are hesitant to upgrade, then replace  
horde/services/help/index.php with this file:
   http://cvs.horde.org/co.php?r=2.86&p=1&f=horde%2Fservices%2Fhelp%2Findex.php
It's from HEAD but should work with all Horde 3.x versions for now and  
will protect you.
There are active scans for this vulnerability, and far too many people  
are being caught off guard by it. Please take the time to upgrade now.
Thank you,
-chuck
-- 
"we are plastered to the windshield of the bus that is time." - Chris
    
    
More information about the imp
mailing list