| Vulnerability Name: | CVE-2012-0209 (CCN-73144) | ||||||||
| Assigned: | 2011-12-14 | ||||||||
| Published: | 2012-02-13 | ||||||||
| Updated: | 2012-09-26 | ||||||||
| Summary: | Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan Horse) in templates/javascript/open_calendar.js, which allows remote attackers to execute arbitrary PHP code. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 6.2 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:F/RL:OF/RC:C)
6.2 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:F/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-94 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2012-0209 Source: CONFIRM Type: Exploit, Patch, Vendor Advisory http://dev.horde.org/h/jonah/stories/view.php?channel_id=1&id=155 Source: MISC Type: Exploit http://eromang.zataz.com/2012/02/15/cve-2012-0209-horde-backdoor-analysis/ Source: CCN Type: Horde Web Site Remote execution backdoor after server hack (CVE-2012-0209) Source: MLIST Type: Exploit, Patch [horde-announce] 20120213 [SECURITY] Remote execution backdoor after server hack (CVE-2012-0209) Source: MISC Type: Exploit http://packetstormsecurity.org/files/109874/Horde-3.3.12-Backdoor-Arbitrary-PHP-Code-Execution.html Source: CCN Type: SA47972 Horde Groupware Two Vulnerabilities Source: CCN Type: SA48024 Horde Groupware Webmail Edition Multiple Vulnerabilities Source: CCN Type: BID-51989 Horde Groupware Source Packages Backdoor Vulnerability Source: MISC Type: Patch https://bugzilla.redhat.com/show_bug.cgi?id=790877 Source: XF Type: UNKNOWN horde-groupware-backdoor(73144) Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [02-17-2012] | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||