Lucene search
HistoryNov 03, 2011 - 3:55 p.m.
CVE-2011-4078
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.8
Confidence
Low
EPSS
0.06
Percentile
93.5%
include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service (resource consumption and inbox outage), via a Subject header containing only a URL, a related issue to CVE-2011-3379.
Affected configurations
Node
roundcubewebmailRange≤0.5.4
ORroundcubewebmailMatch0.1
ORroundcubewebmailMatch0.1alpha
ORroundcubewebmailMatch0.1beta
ORroundcubewebmailMatch0.1beta2
ORroundcubewebmailMatch0.1rc1
ORroundcubewebmailMatch0.1rc2
ORroundcubewebmailMatch0.1.1
ORroundcubewebmailMatch0.2
ORroundcubewebmailMatch0.2alpha
ORroundcubewebmailMatch0.2beta
ORroundcubewebmailMatch0.2.1
ORroundcubewebmailMatch0.3
ORroundcubewebmailMatch0.3beta
ORroundcubewebmailMatch0.3rc1
ORroundcubewebmailMatch0.3.1
ORroundcubewebmailMatch0.4
ORroundcubewebmailMatch0.4beta
ORroundcubewebmailMatch0.4.1
ORroundcubewebmailMatch0.4.2
ORroundcubewebmailMatch0.5
ORroundcubewebmailMatch0.5beta
ORroundcubewebmailMatch0.5rc
ORroundcubewebmailMatch0.5.1
ORroundcubewebmailMatch0.5.2
ORroundcubewebmailMatch0.5.3
phpphpMatch5.3.7
ORphpphpMatch5.3.8
Related
ubuntucve
ubuntucve
CVE-2011-4078
2011-11-03 00:00:00
CVE-2011-3379
2011-11-03 00:00:00
cvelist
cvelist
CVE-2011-4078
2011-11-03 15:00:00
CVE-2011-3379
2011-11-03 15:00:00
prion
prion
Sql injection
2011-11-03 15:55:00
Code injection
2011-11-03 15:55:00
debiancve
debiancve
CVE-2011-4078
2011-11-03 15:55:00
cve
cve
CVE-2011-4078
2011-11-03 15:55:00
CVE-2011-3379
2011-11-03 15:55:00
nessus
nessus
Fedora 15 : php-5.3.8-3.fc15 (2011-13446)
2011-10-10 00:00:00
Fedora 14 : php-5.3.8-3.fc14 (2011-13458)
2011-10-10 00:00:00
Fedora 16 : php-5.3.8-3.fc16 (2011-13472)
2011-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: php-5.3.8-3.fc14
2011-10-08 18:03:14
[SECURITY] Fedora 15 Update: php-5.3.8-3.fc15
2011-10-08 17:58:50
[SECURITY] Fedora 16 Update: php-5.3.8-3.fc16
2011-10-09 19:34:08
openvas
openvas
Fedora Update for php FEDORA-2011-13458
2011-10-10 00:00:00
PHP 'is_a()' Function Remote File Include Vulnerability
2011-10-12 00:00:00
Fedora Update for php FEDORA-2011-13446
2011-10-10 00:00:00
securityvulns
securityvulns
PHP is_a function vulnerability
2011-09-26 00:00:00
[ MDVSA-2012:071 ] php
2012-05-14 00:00:00
nvd
nvd
CVE-2011-3379
2011-11-03 15:55:00
amazon
amazon
Important: php
2011-10-11 00:07:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2012-09-24 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.8
Confidence
Low
EPSS
0.06
Percentile
93.5%
Related for NVD:CVE-2011-4078