exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New


Posted Sep 11, 2008
Authored by Alexios Fakos | Site nruns.com

Horde versions 3.2 through 3.2.1 suffer from a cross site scripting vulnerability due to the handling of MIME attachments.

tags | advisory, xss
advisories | CVE-2008-3823
SHA-256 | c2a3082c148d60c17ee794b27d8f58dbea9dcafc37b3a98ef6dc4162c3890507


Change Mirror Download
n.runs AG
http://www.nruns.com/ security(at)nruns.com
n.runs-SA-2008.006 11-Sep-2008

Vendor: The Horde Project, http://www.horde.org/
Affected Products: Horde >= 3.2, Horde <= 3.2.1
Vulnerability: Cross-Site Scripting in filename MIME attachments
CVE: CVE-2008-3823
oCERT: oCERT-2008-012

Vendor communication:

2008/07/25 Bug found and PoC preparation
2008/07/26 Vulnerability report submitted via oCert online-form
2008/08/05 oCert confirmed the submission. oCert starts the
coordination of affected authors/vendors
2008/09/06 oCert informs all parties about the advisory release
2008/09/11 n.runs AG releases this advisory in coordination with



The Horde project is about creating high quality Open Source
applications, based on PHP and the Horde Framework.

The guiding principles of the Horde Project are to create solid
standards-based applications using intelligent object-oriented design
that, wherever possible, are designed to run on a wide range of
platforms and backends. There is great emphasis on making Horde as
friendly to non-English speakers as possible. The Horde Framework
currently supports many localization features such as unicode and
right-to-left text and generous users have contributed many translations
for the framework and applications.

Currently Horde Project boasts many applications, some already
enterprise-ready and deployed in demanding environments, and some
exciting new ones still in development.


The Horde Framework fails to properly sanitize the filename of MIME
attachments on received emails.


While a webmail user is viewing an email with a malicously prepared
filename attachment, the attacker can highjack victim's account.
This allows him to send emails on behalf of the victim or to do other
arbitrary actions.


For detailed information about the fixes, follow the link in the
references section [1] of this document.


Bug found by Alexios Fakos of n.runs AG.

Many thanks to Will Drewry of oCert team for the coordination and
professional communication.

[1] http://www.ocert.org/advisories/ocert-2008-012.html

This Advisory and Upcoming Advisories:

Subscribe to the n.runs newsletter by signing up to:


Unaltered electronic reproduction of this advisory is permitted. For all
other reproduction or publication, in printing or otherwise, contact
security@nruns.com for permission. Use of the advisory constitutes
acceptance for use in an "as is" condition. All warranties are excluded.
In no event shall n.runs be liable for any damages whatsoever including
direct, indirect, incidental, consequential, loss of business profits or
special damages, even if n.runs has been advised of the possibility of
such damages.

Copyright 2008 n.runs AG. All rights reserved. Terms of use apply.

Login or Register to add favorites

File Archive:

March 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    13 Files
  • 3
    Mar 3rd
    15 Files
  • 4
    Mar 4th
    0 Files
  • 5
    Mar 5th
    0 Files
  • 6
    Mar 6th
    16 Files
  • 7
    Mar 7th
    31 Files
  • 8
    Mar 8th
    16 Files
  • 9
    Mar 9th
    13 Files
  • 10
    Mar 10th
    9 Files
  • 11
    Mar 11th
    0 Files
  • 12
    Mar 12th
    0 Files
  • 13
    Mar 13th
    10 Files
  • 14
    Mar 14th
    6 Files
  • 15
    Mar 15th
    17 Files
  • 16
    Mar 16th
    22 Files
  • 17
    Mar 17th
    13 Files
  • 18
    Mar 18th
    0 Files
  • 19
    Mar 19th
    0 Files
  • 20
    Mar 20th
    16 Files
  • 21
    Mar 21st
    13 Files
  • 22
    Mar 22nd
    5 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    0 Files
  • 26
    Mar 26th
    0 Files
  • 27
    Mar 27th
    0 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags


packet storm

© 2022 Packet Storm. All rights reserved.

Security Services
Hosting By