ID de Prueba:	1.3.6.1.4.1.25623.1.0.13857
Categoría:	Web application abuses
Título:	Horde IMP HTML+TIME XSS Vulnerability
Resumen:	The remote server is running at least one instance of Horde IMP whose; version number is 3.2.4 or lower.
Descripción:	Summary: The remote server is running at least one instance of Horde IMP whose version number is 3.2.4 or lower. Vulnerability Insight: Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to inject arbitrary content, including script, in a specially crafted MIME message. To have an effect, the victim must be using Internet Explorer to access IMP and be using the inline MIME viewer for HTML messages. This vulnerability is a variation on the one reported in the referenced links. Solution: Upgrade to Horde IMP version 3.2.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1443 BugTraq ID: 10845 http://www.securityfocus.com/bid/10845 http://www.gentoo.org/security/en/glsa/glsa-200408-07.xml http://secunia.com/advisories/12202/ XForce ISS Database: imp-html-viewer-xss(16866) https://exchange.xforce.ibmcloud.com/vulnerabilities/16866
Copyright	Copyright (C) 2004 George A. Theall

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.