HTTP: Horde Href Backdoor
This signature detects attempts to exploit a known backdoor vulnerability in Horde. A successful attack can lead to arbitrary code execution in the context of the application.
Extended Description
Horde Groupware is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the affected application. Horde Groupware versions 1.2.10 between November 2, 2011, and February 7, 2012, are vulnerable.
Affected Products
Horde_project groupware,Horde_project groupware
Short Name
HTTP:PHP:HORDE-HREF-BACKDOOR
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Backdoor CVE-2012-0209 Horde Href bid:51989
Release Date
08/29/2012
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Horde_project
CVSS Score
7.5