CVE-2008-7219

Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.

Affected Software

Name	Vendor	Start Version	End Version
Groupware	Horde	1.0 (including)	1.0 (including)
Groupware	Horde	1.0.1 (including)	1.0.1 (including)
Groupware	Horde	1.0.2 (including)	1.0.2 (including)
Groupware	Horde	1.1 (including)	1.1 (including)
Groupware_webmail_edition	Horde	1.0 (including)	1.0 (including)
Groupware_webmail_edition	Horde	1.0.2 (including)	1.0.2 (including)
Groupware_webmail_edition	Horde	1.0.3 (including)	1.0.3 (including)
Groupware_webmail_edition	Horde	1.1 (including)	1.1 (including)
Kronolith_h3	Horde	2.1 (including)	2.1 (including)
Kronolith_h3	Horde	2.1.1 (including)	2.1.1 (including)
Kronolith_h3	Horde	2.1.2 (including)	2.1.2 (including)
Kronolith_h3	Horde	2.1.3 (including)	2.1.3 (including)
Kronolith_h3	Horde	2.1.4 (including)	2.1.4 (including)
Kronolith_h3	Horde	2.1.5 (including)	2.1.5 (including)
Kronolith_h3	Horde	2.1.6 (including)	2.1.6 (including)
Kronolith_h3	Horde	2.2 (including)	2.2 (including)
Mnemo_h3	Horde	2.1 (including)	2.1 (including)
Mnemo_h3	Horde	2.1.1 (including)	2.1.1 (including)
Mnemo_h3	Horde	2.2 (including)	2.2 (including)
Nag_h3	Horde	2.1 (including)	2.1 (including)
Nag_h3	Horde	2.1.1 (including)	2.1.1 (including)
Nag_h3	Horde	2.1.2 (including)	2.1.2 (including)
Nag_h3	Horde	2.1.3 (including)	2.1.3 (including)
Nag_h3	Horde	2.2 (including)	2.2 (including)
Kronolith2	Ubuntu	dapper	*
Kronolith2	Ubuntu	hardy	*
Kronolith2	Ubuntu	intrepid	*
Kronolith2	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-7219
CWE	https://cwe.mitre.org/data/definitions/264.html

Affected Software

References