CVE-2006-1260

Publication date 19 March 2006

Last updated 24 July 2024


Ubuntu priority

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
horde3 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected