2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2010-0464" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2010-01-29T18:30:01.137" ,
2024-11-22 11:14:00 +00:00
"lastModified" : "2024-11-21T01:12:16.477" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests."
} ,
{
"lang" : "es" ,
"value" : "Roundcube v0.3.1 y anteriores no solicitan que el navegador web permita el \"prefetching\" DNS de los nombres de dominio contenidos en mensajes de correo electr\u00f3nico, lo que facilita a atacantes remotos determinar la localizaci\u00f3n de red del usuario de webmail mediante peticiones de logggin DNS."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N" ,
2024-11-22 11:14:00 +00:00
"baseScore" : 5.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
2024-11-22 11:14:00 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-200"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "0.3.1" ,
"matchCriteriaId" : "12C3ED93-48DB-4220-8416-DB138ED87630"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4C785B00-7F4D-4EBD-A9FA-726D4D35E5D1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:20050811:*:*:*:*:*:*" ,
"matchCriteriaId" : "6E525B8F-ED49-494A-A9C1-CCFFDCFAAA11"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:20050820:*:*:*:*:*:*" ,
"matchCriteriaId" : "A9C38F5E-A79B-45F4-AD0C-894DE7ADD8EE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:20051007:*:*:*:*:*:*" ,
"matchCriteriaId" : "8BDB7224-1922-41BC-82F1-187DEEEE60DA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:20051021:*:*:*:*:*:*" ,
"matchCriteriaId" : "9019C121-5D96-4967-92FA-AA63FAD40435"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:alpha:*:*:*:*:*:*" ,
"matchCriteriaId" : "8F433741-5F73-43B5-A522-C484C64C66A7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:beta:*:*:*:*:*:*" ,
"matchCriteriaId" : "09DF755B-041E-4A61-BEF6-A613F6F0CE13"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:beta2:*:*:*:*:*:*" ,
"matchCriteriaId" : "34D20437-7DE7-4DB8-8C11-37B09A87E3A4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:rc1:*:*:*:*:*:*" ,
"matchCriteriaId" : "55FB4AA3-3528-46B7-BBB9-9185DAA5425C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:rc2:*:*:*:*:*:*" ,
"matchCriteriaId" : "066AA2BC-95A8-43E8-A1FE-9F15860691E1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1:stable:*:*:*:*:*:*" ,
"matchCriteriaId" : "BADA5A07-C90D-4000-A973-0A918E390D5F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.1.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "82FB886B-35A4-4A8C-AE18-62C845886018"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "83FF6973-9BAC-4DF2-BACE-42F0D9340A27"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.2:alpha:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB6449FD-C6EE-497C-BE34-88900883AD09"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.2:beta:*:*:*:*:*:*" ,
"matchCriteriaId" : "0CEF8BF6-E09F-4376-B089-9B722A84F591"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.2:stable:*:*:*:*:*:*" ,
"matchCriteriaId" : "84126D1E-F709-4F23-A541-B92B6ED01D3D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.2.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "946B0B6A-46D3-46B9-BD1E-B03D3339EEB3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.2.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0D572A44-701A-4D6F-919F-AB8AE4BF4417"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4D6EA96-EE58-47C3-B545-7238B3F64941"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.3:beta:*:*:*:*:*:*" ,
"matchCriteriaId" : "3584BB62-818D-4A5B-BC7D-EAB0B85614EA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.3:rc1:*:*:*:*:*:*" ,
"matchCriteriaId" : "332FF744-3682-4818-9602-8F868BF0781E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:roundcube:webmail:0.3:stable:*:*:*:*:*:*" ,
"matchCriteriaId" : "141BFB80-F895-482C-B2ED-A6FB9135EA9B"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://trac.roundcube.net/ticket/1486449" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:048" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail" ,
"source" : "cve@mitre.org"
2024-11-22 11:14:00 +00:00
} ,
{
"url" : "http://trac.roundcube.net/ticket/1486449" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:048" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
