Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2010-0464

Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

  • Published: Jan 29, 2010
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-0464
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
roundcube / webmail 0.1-rc1 0.1-rc1.x
roundcube / webmail 0.1-20050820 0.1-20050820.x
roundcube / webmail 0.1-20051007 0.1-20051007.x
roundcube / webmail 0.1 0.1.x
roundcube / webmail 0.1-beta2 0.1-beta2.x
roundcube / webmail 0.1-beta 0.1-beta.x
roundcube / webmail 0.1-20050811 0.1-20050811.x
roundcube / webmail 0.3-rc1 0.3-rc1.x
roundcube / webmail 0.2-stable 0.2-stable.x
roundcube / webmail 0.2-alpha 0.2-alpha.x
roundcube / webmail 0.1-rc2 0.1-rc2.x
roundcube / webmail 0.3-beta 0.3-beta.x
roundcube / webmail 0.1-stable 0.1-stable.x
roundcube / webmail - 0.3.1.x
roundcube / webmail 0.1-20051021 0.1-20051021.x
roundcube / webmail 0.2.2 0.2.2.x
roundcube / webmail 0.3 0.3.x
roundcube / webmail 0.1.1 0.1.1.x
roundcube / webmail 0.1-alpha 0.1-alpha.x
roundcube / webmail 0.2 0.2.x
roundcube / webmail 0.2-beta 0.2-beta.x
roundcube / webmail 0.2.1 0.2.1.x
roundcube / webmail 0.3-stable 0.3-stable.x