CVE-2009-0932
N/A
Published: March 17, 2009 at 09:00 PM UTC
Updated: June 16, 2026 at 11:06 PM UTC
2 products affected across 1 vendorHordeHorde Groupware
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 48%
Description
Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5
- http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5
- http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503
- http://lists.horde.org/archives/announce/2009/000482.html
- http://lists.horde.org/archives/announce/2009/000483.html
References (12)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503Mailing Listx_refsource_MLISTVendor Advisory
Source: [email protected]
http://lists.horde.org/archives/announce/2009/000482.htmlMailing Listx_refsource_MLISTVendor Advisory
Source: [email protected]
http://lists.horde.org/archives/announce/2009/000483.htmlMailing Listx_refsource_MLISTVendor Advisory
Source: [email protected]
http://lists.horde.org/archives/announce/2009/000486.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/33695Quick Info
StatusMODIFIED
CWE
CWE-22
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card