Horde Groupware contains backdoor

There was no endpoint listening at http://api.microsofttranslator.com/v1/Soap.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
There was no endpoint listening at http://api.microsofttranslator.com/v1/Soap.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
Unknown perpetrators infiltrated a backdoor into several installation packages during an attack on groupware provider Horde's FTP server. Horde 3.3.12, Groupware 1.2.10 and the webmail edition of the groupware product are all affected. Horde 4 was not modified. The CVS and Git servers are also unaffected. Users who have installed a hacked version onto a server have thrown their systems wide open to the hackers ? the backdoor enables them to execute arbitrary PHP code. By exploiting additional vulnerabilities, attackers could use this to gain complete control of the server.

Read this full article at H Security

Only registered users can write comments.
Please login or register.

Powered by AkoComment!