Bug 320957 (CVE-2010-0403)

Summary:	www-apps/phpgroupware: multiple vulnerabilites (CVE-2010-0403)
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED OBSOLETE
Severity:	trivial	CC:	web-apps
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
Whiteboard:	~2? [ebuild]
Package list:		Runtime testing required:	---

Description Stefan Behte (RETIRED) gentoo-dev

2010-05-21 21:46:19 UTC

CVE-2010-0403 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0403):
  Directory traversal vulnerability in about.php in phpGroupWare
  (phpgw) before 0.9.16.016 allows remote attackers to include and
  execute arbitrary local files via a .. (dot dot) in the app parameter.

Comment 1 Stefan Behte (RETIRED) gentoo-dev

2011-02-14 23:05:19 UTC

Please bump!

Comment 2 Chris Reffett (RETIRED) gentoo-dev

2013-09-03 04:34:30 UTC

Seems to be gone from tree.