Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

HTTP:PHP:HORDE-HREF-BACKDOOR

Severity

High

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

Horde Href Backdoor

Release Date

2012/08/29

Update Number

2179

Supported Platforms

di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

HTTP: Horde Href Backdoor


This signature detects attempts to exploit a known backdoor vulnerability in Horde. A successful attack can lead to arbitrary code execution in the context of the application.

Extended Description

Horde Groupware is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the affected application. Horde Groupware versions 1.2.10 between November 2, 2011, and February 7, 2012, are vulnerable.

Affected Products

  • Horde Project Groupware 1.0
  • Horde Project Groupware 1.0.1 Webmail
  • Horde Project Groupware 1.0.2
  • Horde Project Groupware 1.0.2 Webmail
  • Horde Project Groupware 1.0.3
  • Horde Project Groupware 1.0.4
  • Horde Project Groupware 1.0.5
  • Horde Project Groupware 1.0.6
  • Horde Project Groupware 1.0.7
  • Horde Project Groupware 1.0.7 Webmail
  • Horde Project Groupware 1.0 Rc1 Webmail
  • Horde Project Groupware 1.0-RC3
  • Horde Project Groupware 1.1.1
  • Horde Project Groupware 1.1.2
  • Horde Project Groupware 1.1.3
  • Horde Project Groupware 1.1.3 Webmail
  • Horde Project Groupware 1.1.4
  • Horde Project Groupware 1.1.5
  • Horde Project Groupware 1.1.6
  • Horde Project Groupware 1.1 Rc1 Webmail
  • Horde Project Groupware 1.1 Rc2 Webmail
  • Horde Project Groupware 1.1 Rc3 Webmail
  • Horde Project Groupware 1.1 Rc4 Webmail
  • Horde Project Groupware 1.1 Webmail
  • Horde Project Groupware 1.2
  • Horde Project Groupware 1.2.1
  • Horde Project Groupware 1.2.10
  • Horde Project Groupware 1.2.3 Webmail
  • Horde Project Groupware 1.2.4
  • Horde Project Groupware 1.2.5
  • Horde Project Groupware 1.2.6
  • Horde Project Groupware 1.2.6 Webmail
  • Horde Project Groupware 1.2.7 Webmail
  • Horde Project Groupware 1.2.8
  • Horde Project Groupware 1.2.8 Webmail
  • Horde Project Groupware 1.2.9
  • Horde Project Groupware 1.2.9 Webmail
  • Horde Project Groupware 1.2 Rc1 Webmail
  • Horde Project Groupware Webmail Edition 1.0
  • Horde Project Groupware Webmail Edition 1.0.3
  • Horde Project Groupware Webmail Edition 1.0.4
  • Horde Project Groupware Webmail Edition 1.0.5
  • Horde Project Groupware Webmail Edition 1.0.6
  • Horde Project Groupware Webmail Edition 1.0.7
  • Horde Project Groupware Webmail Edition 1.0.8
  • Horde Project Groupware Webmail Edition 1.0-RC2
  • Horde Project Groupware Webmail Edition 1.1.1
  • Horde Project Groupware Webmail Edition 1.1.2
  • Horde Project Groupware Webmail Edition 1.1.3
  • Horde Project Groupware Webmail Edition 1.1.4
  • Horde Project Groupware Webmail Edition 1.1.5
  • Horde Project Groupware Webmail Edition 1.1.6
  • Horde Project Groupware Webmail Edition 1.2
  • Horde Project Groupware Webmail Edition 1.2.1
  • Horde Project Groupware Webmail Edition 1.2.2
  • Horde Project Groupware Webmail Edition 1.2.3 RC1
  • Horde Project Groupware Webmail Edition 1.2.4
  • Horde Project Groupware Webmail Edition 1.2.5
  • Horde Project Groupware Webmail Edition 1.2.6
  • Horde Project Groupware Webmail Edition 1.2.9
  • Horde Project Groupware Webmail Edition

References

  • BugTraq: 51989
  • CVE: CVE-2012-0209
  • URL: http://eromang.zataz.com/2012/02/15/cve-2012-0209-horde-backdoor-analysis/

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out