Horde arbitrary file inclusion vulnerability

Posted on March 7th, 2008 by Gabriel Harper

Admins running cPanel w/ Horde should pay special attention to the security update released by cPanel. An arbitrary file inclusion vulnerability was discovered in the Horde webmail app and a patch is included in cPanel builds 11.18.2+ (11.19.2+ for EDGE).

Update cPanel with WHM or as root:

/scripts/upcp

For more info read the official announcement.

Tags: ,

Leave a Reply