[VIM] Recent unspecified Horde vuln is eval injection
George A. Theall
theall at tenablesecurity.com
Thu Mar 30 07:32:39 EST 2006
Steven M. Christey wrote:
> Eval injection vulnerability in Horde Application Framework versions
> 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to
> execute arbitrary code via the help viewer.
This one's nasty -- an unauthenticated attacker can execute arbitrary
PHP code regardless of the familiar register_globals / magic_quotes_gpc
settings and using just a simple GET. Even Hardened PHP's patches don't
stop it. Given Horde's popularity, I expect to this since used by worm
writers as soon as details get out on the exploit.
More information about the VIM