- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200309-02.1
- - ---------------------------------------------------------------------

� � � � � PACKAGE : horde
� � � � � SUMMARY : session hijacking
� � � � � � �DATE : 2003-09-01 14:38 UTC
� � � � � EXPLOIT : remote
VERSIONS AFFECTED : =horde-2.2.4_rc2
� � � � � � � CVE :

- - ---------------------------------------------------------------------

This advisory contains the correct values for VERSIONS AFFECTED and
FIXED VERSION

SOLUTION

It is recommended that all Gentoo Linux users who are running
net-www/horde upgrade to horde-2.2.4_rc2 as follows:

emerge sync
emerge horde
emerge clean

- - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at - - ---------------------------------------------------------------------

Gentoo: horde Remote session hijacking

An attacker could send an email to the victim who ago use of HORDE MTAin order to push it to visit a website

Summary


- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200309-02.1
- - ---------------------------------------------------------------------

- - ---------------------------------------------------------------------
This advisory contains the correct values for VERSIONS AFFECTED and FIXED VERSION
SOLUTION
It is recommended that all Gentoo Linux users who are running net-www/horde upgrade to horde-2.2.4_rc2 as follows:
emerge sync emerge horde emerge clean
- - --------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at - - ---------------------------------------------------------------------

Resolution

References

Availability

Concerns

Severity
� � � � � PACKAGE : horde
� � � � � SUMMARY : session hijacking
� � � � � � �DATE : 2003-09-01 14:38 UTC
� � � � � EXPLOIT : remote
VERSIONS AFFECTED : =horde-2.2.4_rc2
� � � � � � � CVE :

Synopsis

Background

Affected Packages

Impact

Workaround

Related News