CVE-2013-1904
Published: 08 February 2014
Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013.
Priority
Medium
Status
| Package | Release | Status |
|---|---|---|
|
roundcube Launchpad, Ubuntu, Debian |
Upstream |
Released
(0.7.2-9)
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(0.7.2-9)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was not-affected [0.7.2-9])
|
|
|
Patches: Upstream: http://iweb.dl.sourceforge.net/project/roundcubemail/roundcubemail-beta/0.9-RC/save_prefs_vulnerability_fix_0.9.patch Upstream: http://iweb.dl.sourceforge.net/project/roundcubemail/roundcubemail/0.8.5/save_prefs_vulnerability_fix_0.8.patch Upstream: http://hivelocity.dl.sourceforge.net/project/roundcubemail/roundcubemail/0.7.3/save_prefs_vulnerability_fix_0.7.patch Upstream: http://superb-dca2.dl.sourceforge.net/project/roundcubemail/roundcubemail/0.6/save_prefs_vulnerability_fix_0.6.patch |
||