CVE

Id
51990  
CVE No.
CVE-2011-4078  
Status
Candidate  
Description
include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service (resource consumption and inbox outage), via a Subject header containing only a URL, a related issue to CVE-2011-3379.  
Phase
Assigned (20111018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
557061 51990 CVE-2011-4078 MLIST:[oss-security] 20111026 Re: CVE Request -- Round Cube Webmail -- DoS (unavailability to access user"s INBOX) after receiving an email message with the URL in the Subject  View
557062 51990 CVE-2011-4078 URL:http://openwall.com/lists/oss-security/2011/10/26/6  View
557063 51990 CVE-2011-4078 CONFIRM:http://trac.roundcube.net/ticket/1488086  View
557064 51990 CVE-2011-4078 HP:HPSBMU02786  View
557065 51990 CVE-2011-4078 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041  View
557066 51990 CVE-2011-4078 HP:SSRT100877  View
557067 51990 CVE-2011-4078 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041  View
557068 51990 CVE-2011-4078 BID:50402  View
557069 51990 CVE-2011-4078 URL:http://www.securityfocus.com/bid/50402  View
557070 51990 CVE-2011-4078 XF:webmail-uri-dos(71025)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35048 JVNDB-2011-005290 Red Hat sos パッケージの sosreport ユーティリティにおける重要な情報を取得される脆弱性 Red Hat sos パッケージの sosreport ユーティリティは、デバッグ情報のアーカイブ内に (1) Certificate-based Red Hat Network の秘密エンタイトルメント鍵 (private entitlement key) および (2) エンタイトルメント用の秘密鍵 (private key for the entitlement) を含むため、重要な情報を取得される脆弱性が存在します。 CVE-2011-4083 51990 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005290.html  View