CVE-2010-0463 in IMP

Riassunto

di MITRE

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 29/01/2010
• Divulgazione: 29/01/2010
• Moderazione: accettato
• Voce: VDB-51711
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.01945
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Energy, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-0463
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-0463
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-0463/