CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for…

published January 29, 2010

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01983 · 80.4th percentile
Published
2010-01-29T18:00Z
EPSS history
Timeline
  • 29 JAN 18:00Z
    Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for…
    cvelistv5