VulnerabilityModified
CVE-2007-1474
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.
MEDIUM 6.8EPSS 4.95%
Does this matter?
Lower severity and a low EPSS score (4.95%). Track it; it rarely justifies an emergency change on its own.
Description
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 4.95% probability · 92th percentile
- CISA KEV
- Not listed
- Affected
- horde/horde application framework · horde/imp
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=489Vendor Advisory
- http://lists.horde.org/archives/announce/2007/000315.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/27565
- http://www.debian.org/security/2007/dsa-1406
- http://www.securityfocus.com/bid/22985
- http://www.securitytracker.com/id?1017784
- http://www.securitytracker.com/id?1017785
- http://www.vupen.com/english/advisories/2007/0965
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32997
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=489Vendor Advisory
- http://lists.horde.org/archives/announce/2007/000315.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/27565
- http://www.debian.org/security/2007/dsa-1406
- http://www.securityfocus.com/bid/22985
- http://www.securitytracker.com/id?1017784
- http://www.securitytracker.com/id?1017785
- http://www.vupen.com/english/advisories/2007/0965
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32997
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.