LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - News > Syndicated Linux News
User Name
Password
Syndicated Linux News This forum is for the discussion of Syndicated Linux News stories.

Notices


Reply
  Search this Thread
Old 10-28-2013, 11:51 PM   #1
LXer
LXer NewsBot
 
Registered: Dec 2005
Posts: 99,831

Rep: Reputation: 102Reputation: 102
LXer: Debian: 2787-1: roundcube: design error


Published at LXer:

It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, does not properly sanitize the _session parameter in steps/utils/save_pref.inc during saving preferences. The vulnerability can be exploited to overwrite configuration settings and subsequently allowing random file access, manipulated SQL queries and even code execution.

Read More...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Using RoundCube Webmail With ISPConfig 3 On Debian Wheezy (nginx) LXer Syndicated Linux News 0 10-10-2013 10:50 AM
LXer: Using RoundCube Webmail With ISPConfig 3 On Debian Wheezy (Apache2) LXer Syndicated Linux News 0 06-12-2013 01:00 PM
LXer: Running Roundcube 0.7.1 On Nginx (LEMP) On Debian Squeeze/Ubuntu 11.10 LXer Syndicated Linux News 0 03-06-2012 03:31 PM
LXer: How To Install RoundCube 0.7 For ISPConfig 3 On Debian Squeeze LXer Syndicated Linux News 0 12-24-2011 12:20 AM
LXer: Easy RoundCube (Over SSL) And Webmin With fail2ban For ISPConfig 3 On Debian Squeeze LXer Syndicated Linux News 0 03-04-2011 09:00 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - News > Syndicated Linux News

All times are GMT -5. The time now is 02:56 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration