p PatchFirst

CVE-2010-0464

CVE-2010-0464

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

EPSS 2.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • roundcube Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.3.1-3

    Update to 0.3.1-3

  • roundcube Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.3.1-3

    Update to 0.3.1-3

  • roundcube Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.3.1-3

    Update to 0.3.1-3

Original sources

Check your server →