Test Kennung:	1.3.6.1.4.1.25623.1.0.12263
Kategorie:	Web application abuses
Titel:	Horde IMP Content-Type XSS Vulnerability
Zusammenfassung:	The remote server is running at least one instance of Horde IMP whose version; number is between 2.0 and 3.2.3 inclusive.
Beschreibung:	Summary: The remote server is running at least one instance of Horde IMP whose version number is between 2.0 and 3.2.3 inclusive. Vulnerability Insight: Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary Javascript code simply by reading a MIME message with a specially crafted Content-Type header. For information about the vulnerability, including exploits, see the referenced links. Solution: Upgrade to Horde IMP version 3.2.4 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 10501 Common Vulnerability Exposure (CVE) ID: CVE-2004-0584 http://www.securityfocus.com/bid/10501 http://www.gentoo.org/security/en/glsa/glsa-200406-11.xml http://www.horde.org/imp/3.2/ http://secunia.com/advisories/11805 XForce ISS Database: imp-content-type-xss(16357) https://exchange.xforce.ibmcloud.com/vulnerabilities/16357
Copyright	This script is Copyright (C) 2004 George A. Theall

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.