medium5.0
CVE-2010-0463
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for…
Impact
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Horde | Imp | through 4.3.6 Versions 2.0, 2.2, 2.2.1, 2.2.2, 2.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.horde.org/ticket/8836
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56052
- https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail
- http://bugs.horde.org/ticket/8836
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56052
- https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail