From 61f1e8fc5208057c996c6294900552353e2c56f4 Mon Sep 17 00:00:00 2001 From: nectar Date: Fri, 21 Jan 2005 14:53:14 +0000 Subject: Document a vulnerability in eGroupWare. --- security/vuxml/vuln.xml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index b86e5679536c..3cdd98f14f74 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,30 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> + + egroupware -- arbitrary file download in JiNN + + + eGroupWare + 1.0.0.006 + + + + +

eGroupWare contains a bug in the JiNN component that allows + a remote attacker to download arbitrary files.

+ + + + http://cvs.sourceforge.net/viewcvs.py/egroupware/jinn/CHANGELOG#rev1.24 + http://sourceforge.net/mailarchive/forum.php?thread_id=5915445&forum_id=35178 + + + 2004-10-15 + 2005-01-21 + + + quake2 -- multiple critical vulnerabilities -- cgit