eGroupWare Multiple Vulnerabilities - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

eGroupWare Multiple Vulnerabilities

Secunia Advisory:	SA17620
Release Date:	2005-11-18

Critical:	Moderately critical
Impact:	Security Bypass Cross Site Scripting Manipulation of data Exposure of system information Exposure of sensitive information
Where:	From remote
Solution Status:	Unpatched

Software:	eGroupWare 1.x

CVE reference:	CVE-2005-0870 (Secunia mirror) CVE-2005-2600 (Secunia mirror) CVE-2005-2654 (Secunia mirror) CVE-2005-3347 (Secunia mirror) CVE-2005-3348 (Secunia mirror)

	This advisory is currently marked as unpatched! - Companies can be alerted when a patch is released!

Description: Some vulnerabilities have been reported in eGroupWare, which potentially can be exploited by malicious people to conduct cross-site scripting attacks, manipulate certain information, and bypass certain security restrictions. For more information: SA14690 SA16414 SA16611 SA17441 Solution: Edit the source code to ensure that input is properly sanitised and verified. Provided and/or discovered by: Reported in a Debian advisory. Original Advisory: http://www.debian.org/security/2005/dsa-899 Other References: SA14690: http://secunia.com/advisories/14690/ SA16414: http://secunia.com/advisories/16414/ SA16611: http://secunia.com/advisories/16611/ SA17441: http://secunia.com/advisories/17441/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

10 Related Secunia Security Advisories

1. eGroupWare File Upload Vulnerability

2. eGroupWare HTML Filter Bypass Vulnerability

3. eGroupWare "cat_data[color]" Cross-Site Scripting

4. eGroupWare wz_tooltips and ADOdb Unspecified Vulnerabilities

5. eGroupWare XML-RPC Nested XML Tags PHP Code Execution

6. eGroupWare XML-RPC PHP Code Execution Vulnerability

7. eGroupWare Cross-Site Scripting and SQL Injection Vulnerabilities

8. eGroupWare Exposure of Mail Attachments

9. eGroupWare JiNN Component Arbitrary File Download Vulnerability

10. eGroupWare Cross-Site Scripting and Script Insertion Vulnerabilities

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Kostenloses Linkmanagements cript Multiple Vulnerabilities

2.	Model Search "cat" SQL Injection Vulnerability

3.	Linux Kernel Multiple Vulnerabilities

4.	W1L3D4 Philboard Multiple SQL Injection Vulnerabilities

5.	Oracle Application Server Portal Authentication Bypass

6.	Symantec Altiris Deployment Solution Multiple Vulnerabilities

7.	Drupal Site Documentation Module Information Disclosure

8.	e107 BLOG Engine Plugin "rid" SQL Injection

9.	Blender Multiple Temporary File Security Issues

10.	Rantx "logininfo" Security Bypass Vulnerability