CVE-2007-1474 Command injection in n/a
Local attackers can inject arguments into a cleanup script to delete arbitrary files and potentially escalate privileges in the Horde webmail suite.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-1474?
CVE-2007-1474 is a medium-severity command injection vulnerability in n/a, published on 16 Mar 2007. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.
Which versions are affected by CVE-2007-1474?
It affects 2 products.
Products include Horde Horde Application Framework, Horde Imp.
How do I fix CVE-2007-1474?
Upgrade to a fixed version.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2007-1474 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-1474 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
- CVE-2014-1691 The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object inject
- CVE-2010-3694 Cross-site request forgery in n/a
- CVE-2006-3549 Server-side request forgery in n/a
- CVE-2010-3077 Cross-site scripting in n/a
- CVE-2007-1473 Cross-site scripting in n/a
Sources
Also known as GHSA-j5cq-w784-xr7r.