CVE-2006-1491

Published: Mar 29, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer.

Affected (12)

Products: Horde: Application Framework

1 product

Application Framework

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Horde Application Framework	Version 3.0.1
Horde Application Framework	Version 3.0.2
Horde Application Framework	Version 3.0.3
Horde Application Framework	Version 3.0.4
Horde Application Framework	Version 3.0.4_rc1
Horde Application Framework	Version 3.0.4_rc2
Horde Application Framework	Version 3.0.6
Horde Application Framework	Version 3.0.7
Horde Application Framework	Version 3.0.8
Horde Application Framework	Version 3.0.9
Horde Application Framework	Version 3.0
Horde Application Framework	Version 3.1

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (34)

http://cvs.horde.org/diff.php?f=horde%2Fservices%2Fhelp%2Findex.php&r1=2.85&r2=2.86

Source: cve@mitre.org

http://lists.horde.org/archives/announce/2006/000271.html

Source: cve@mitre.org

Patch

http://lists.horde.org/archives/announce/2006/000272.html

Source: cve@mitre.org

http://secunia.com/advisories/19485

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19504

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19528

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19619

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19692

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015841

Source: cve@mitre.org

Patch

http://www.attrition.org/pipermail/vim/2006-March/000671.html

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1033

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1034

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_07_sr.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/17292

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/1154

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/25516

Source: cve@mitre.org

http://cvs.horde.org/diff.php?f=horde%2Fservices%2Fhelp%2Findex.php&r1=2.85&r2=2.86

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.horde.org/archives/announce/2006/000271.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.horde.org/archives/announce/2006/000272.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19485

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19504

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19528

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19619

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19692

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1015841

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.attrition.org/pipermail/vim/2006-March/000671.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1033

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1034

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_07_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17292

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/1154

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/25516

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.