NetSight
IP …
critical10.0

CVE-2008-7219

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2…

Impact

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.

Affected products

VendorProductAffected versions
HordeGroupware
Versions 1.0, 1.0.1, 1.0.2, 1.1
HordeGroupware Webmail Edition
Versions 1.0, 1.0.2, 1.0.3, 1.1
HordeKronolith H3
Versions 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5
HordeMnemo H3
Versions 2.1, 2.1.1, 2.2
HordeNag H3
Versions 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2

Weakness classification

CWE-264

References