Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:PHP:HORDE-HREF-BACKDOOR

Severity

Major

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

Horde Href Backdoor

Release Date

2012/08/29

Update Number

2179

Supported Platforms

di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: Horde Href Backdoor


This signature detects attempts to exploit a known backdoor vulnerability in Horde. A successful attack can lead to arbitrary code execution in the context of the application.

Extended Description

Horde Groupware is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the affected application. Horde Groupware versions 1.2.10 between November 2, 2011, and February 7, 2012, are vulnerable.

Affected Products

  • Horde_project groupware 1.0
  • Horde_project groupware 1.0.1 Webmail
  • Horde_project groupware 1.0.2
  • Horde_project groupware 1.0.2 Webmail
  • Horde_project groupware 1.0.3
  • Horde_project groupware 1.0.4
  • Horde_project groupware 1.0.5
  • Horde_project groupware 1.0.6
  • Horde_project groupware 1.0.7
  • Horde_project groupware 1.0.7 Webmail
  • Horde_project groupware 1.0 Rc1 Webmail
  • Horde_project groupware 1.0-RC3
  • Horde_project groupware 1.1.1
  • Horde_project groupware 1.1.2
  • Horde_project groupware 1.1.3
  • Horde_project groupware 1.1.3 Webmail
  • Horde_project groupware 1.1.4
  • Horde_project groupware 1.1.5
  • Horde_project groupware 1.1.6
  • Horde_project groupware 1.1 Rc1 Webmail
  • Horde_project groupware 1.1 Rc2 Webmail
  • Horde_project groupware 1.1 Rc3 Webmail
  • Horde_project groupware 1.1 Rc4 Webmail
  • Horde_project groupware 1.1 Webmail
  • Horde_project groupware 1.2
  • Horde_project groupware 1.2.1
  • Horde_project groupware 1.2.10
  • Horde_project groupware 1.2.3 Webmail
  • Horde_project groupware 1.2.4
  • Horde_project groupware 1.2.5
  • Horde_project groupware 1.2.6
  • Horde_project groupware 1.2.6 Webmail
  • Horde_project groupware 1.2.7 Webmail
  • Horde_project groupware 1.2.8
  • Horde_project groupware 1.2.8 Webmail
  • Horde_project groupware 1.2.9
  • Horde_project groupware 1.2.9 Webmail
  • Horde_project groupware 1.2 Rc1 Webmail
  • Horde_project groupware_webmail_edition 1.0
  • Horde_project groupware_webmail_edition 1.0.3
  • Horde_project groupware_webmail_edition 1.0.4
  • Horde_project groupware_webmail_edition 1.0.5
  • Horde_project groupware_webmail_edition 1.0.6
  • Horde_project groupware_webmail_edition 1.0.7
  • Horde_project groupware_webmail_edition 1.0.8
  • Horde_project groupware_webmail_edition 1.0-RC2
  • Horde_project groupware_webmail_edition 1.1.1
  • Horde_project groupware_webmail_edition 1.1.2
  • Horde_project groupware_webmail_edition 1.1.3
  • Horde_project groupware_webmail_edition 1.1.4
  • Horde_project groupware_webmail_edition 1.1.5
  • Horde_project groupware_webmail_edition 1.1.6
  • Horde_project groupware_webmail_edition 1.2
  • Horde_project groupware_webmail_edition 1.2.1
  • Horde_project groupware_webmail_edition 1.2.2
  • Horde_project groupware_webmail_edition 1.2.3 RC1
  • Horde_project groupware_webmail_edition 1.2.4
  • Horde_project groupware_webmail_edition 1.2.5
  • Horde_project groupware_webmail_edition 1.2.6
  • Horde_project groupware_webmail_edition 1.2.9
  • Horde_project groupware_webmail_edition

References

  • BugTraq: 51989
  • CVE: CVE-2012-0209
  • URL: http://eromang.zataz.com/2012/02/15/cve-2012-0209-horde-backdoor-analysis/
  • URL: http://dev.horde.org/h/jonah/stories/view.php?channel_id=1&id=155

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out