Gentoo: horde Remote session hijacking
An attacker could send an email to the victim who ago use of HORDE MTAin order to push it to visit a website
Summary
- - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200309-02.1 - - ---------------------------------------------------------------------
- - ---------------------------------------------------------------------
This advisory contains the correct values for VERSIONS AFFECTED and FIXED VERSION
SOLUTION
It is recommended that all Gentoo Linux users who are running net-www/horde upgrade to horde-2.2.4_rc2 as follows:
emerge sync emerge horde emerge clean
- - --------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at - - ---------------------------------------------------------------------
Resolution
References
Availability
Concerns
Severity
� � � � � PACKAGE : horde
� � � � � SUMMARY : session hijacking
� � � � � � �DATE : 2003-09-01 14:38 UTC
� � � � � EXPLOIT : remote
VERSIONS AFFECTED : =horde-2.2.4_rc2
� � � � � � � CVE :
Background
