Horde IMP status.php3 cross-site scripting
| imp-status-php3-css (8769) |  Medium Risk |
Description:
Horde IMP (Internet Messaging Program) is vulnerable to cross-site scripting. A remote attacker could embed malicious JavaScript within a request to the status.php3 script, which would be executed in other IMP user's Web browsers.
Platforms Affected:
- Conectiva, Linux 5.0
- Conectiva, Linux 5.1
- Conectiva, Linux 6.0
- Conectiva, Linux 7.0
- Conectiva, Linux 8.0
- Debian, Debian Linux 2.2
- Horde, IMP 2.2.7
- SCO, Caldera OpenLinux Server 3.1.1
- SCO, Caldera OpenLinux Workstation 3.1.1
Remedy:
Upgrade to the latest version of IMP (2.2.8 or later), available from the Horde Web site. See References.
For Debian GNU/Linux 2.2 (potato):
Upgrade to the latest version of IMP (2.2.6-0.potato.5 or later) or Horde (1.2.6-0.potato.5 or later), as listed in DSA-126-1. See References.
For Caldera OpenLinux Server and Workstation 3.1 and 3.1.1:
Upgrade to the latest version of IMP (2.2.8-1 or later) or Horde (1.2.8-1 or later), as listed in Caldera International, Inc. Security Advisory CSSA-2002-016.1. See References.
For Conectiva Linux containing the imp package:
Upgrade to the latest imp package as listed below. Refer to Conectiva Linux Announcement CLSA-2002:473 for more information. See References.
Conectiva Linux 5.0: 2.2.8-1U50_1cl or later
Conectiva Linux 5.1: 2.2.8-1U51_1cl or later
Conectiva Linux 6.0: 2.2.8-1U60_1cl or later
Conectiva Linux 7.0: 2.2.8-1U70_1cl or later
Conectiva Linux 8.0: 2.2.8-1cl or later
For Conectiva Linux containing the horde package:
Upgrade to the latest imp package as listed below. Refer to Conectiva Linux Announcement CLSA-2002:473 for more information. See References.
Conectiva Linux 5.0: 1.2.8-1U50_1cl or later
Conectiva Linux 5.1: 1.2.8-1U51_1cl or later
Conectiva Linux 6.0: 1.2.8-1U60_1cl or later
Conectiva Linux 7.0: 1.2.8-1U70_1cl or later
For other distributions:
Contact your vendor for upgrade or patch information.
Consequences:
Other
References:
- BugTraq Mailing List, Sat Apr 06 2002 - 09:02:48 CST, IMP 2.2.8 (SECURITY) released at http://archives.neohapsis.com/archives/bugtraq/2002-04/0087.html.
- Caldera International, Inc. Security Advisory CSSA-2002-016.0, Linux: horde/imp cross scripting vulnerabilities at ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2002-016.0.txt.
- Caldera International, Inc. Security Advisory CSSA-2002-016.1, Linux: REVISED: horde/imp cross scripting vulnerabilities at ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2002-016.1.txt.
- Conectiva Linux Security Announcement CLSA-2002:473, imp -- Cross-site scripting vulnerability at http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000473.
- Horde Web site, IMP Webmail Client at http://www.horde.org/imp/.
- Horde Web site, Horde Bugzilla Bug #916 at http://bugs.horde.org/show_bug.cgi?id=916.
- BID-4444: Horde IMP Status.PHP3 Cross-Site Scripting Vulnerability
- CVE-2002-0181: Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter.
- DSA-126: imp -- cross-site scripting
- OSVDB ID: 5345: Horde IMP status.php3 XSS
Reported:
Apr 06, 2002
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net