CVE:CVE-2008-1284
CNNVD:CNNVD-200803-161
Horde中的Groupware, 以及Groupware Webmail Edition存在目录遍历漏洞。远程授权用户通过".." 序列和主题名中的一个无效字节来读取和执行任意文件。
solution:Upgrade horde groupware to a higher version than 1.0.4,and avoid the version (,1.0.4]; Upgrade horde groupware_webmail_edition to a higher version than 1.0.5,and avoid the version (,1.0.5]; Upgrade horde horde to a higher version than 3.1.6,and avoid the version 3.1.6