Lucene search
HistoryDec 17, 2008 - 2:30 a.m.
CVE-2008-5620
roundcube webmail
denial of service
memory consumption
cve-2008-5620
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.2 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.2%
RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image.
Affected configurations
Node
roundcubewebmailRange≤0.2alpha
ORroundcubewebmailMatch0.1
ORroundcubewebmailMatch0.120050811
ORroundcubewebmailMatch0.120050820
ORroundcubewebmailMatch0.120051007
ORroundcubewebmailMatch0.120051021
ORroundcubewebmailMatch0.1alpha
ORroundcubewebmailMatch0.1beta
ORroundcubewebmailMatch0.1beta2
ORroundcubewebmailMatch0.1rc1
ORroundcubewebmailMatch0.1rc2
ORroundcubewebmailMatch0.1stable
ORroundcubewebmailMatch0.1.1
ORroundcubewebmailMatch0.2
Related
nessus
nessus
Fedora 8 : roundcubemail-0.2-5.beta.fc8 (2008-11581)
2008-12-21 00:00:00
Fedora 9 : roundcubemail-0.2-5.beta.fc9 (2008-11535)
2008-12-21 00:00:00
Fedora 10 : roundcubemail-0.2-5.beta.fc10 (2008-11456)
2009-04-23 00:00:00
openvas
openvas
Fedora Update for roundcubemail FEDORA-2008-11535
2009-02-13 00:00:00
Fedora Update for roundcubemail FEDORA-2008-11456
2009-02-13 00:00:00
Fedora Update for roundcubemail FEDORA-2008-11581
2009-02-13 00:00:00
debiancve
debiancve
CVE-2008-5620
2008-12-17 02:30:00
debian
debian
[Backports-security-announce] Security update for roundcube
2009-01-19 15:59:33
fedora
fedora
[SECURITY] Fedora 8 Update: roundcubemail-0.2-5.beta.fc8
2008-12-21 08:31:39
[SECURITY] Fedora 10 Update: roundcubemail-0.2-5.beta.fc10
2008-12-21 08:35:01
[SECURITY] Fedora 9 Update: roundcubemail-0.2-5.beta.fc9
2008-12-21 08:29:03
ubuntucve
ubuntucve
CVE-2008-5620
2008-12-17 00:00:00
prion
prion
Design/Logic Flaw
2008-12-17 02:30:00
nvd
nvd
CVE-2008-5620
2008-12-17 02:30:00
cvelist
cvelist
CVE-2008-5620
2008-12-17 02:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.2 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.2%
Related for CVE-2008-5620