CVE-2010-0463 | BDVDB-2026-40192 Detail

Description#

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/56052
https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail
http://bugs.horde.org/ticket/8836

Exploit#

No public exploit known

History#

Version 12010-01-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.