ID de Prueba:	1.3.6.1.4.1.25623.1.0.114122
Categoría:	Denial of Service
Título:	Roundcube Webmail <= 0.5.4 DoS Vulnerability
Resumen:	Roundcube Webmail is prone to a denial of service (DoS); vulnerability.
Descripción:	Summary: Roundcube Webmail is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The file 'include/iniset.php', when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL and cause a denial of service (resource consumption and inbox outage), via a Subject header containing only a URL. Affected Software/OS: Roundcube Webmail versions 0.5.4 and prior. Solution: Update to version 0.6 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4078 50402 http://www.securityfocus.com/bid/50402 HPSBMU02786 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 SSRT100877 [oss-security] 20111026 Re: CVE Request -- Round Cube Webmail -- DoS (unavailability to access user's INBOX) after receiving an email message with the URL in the Subject http://openwall.com/lists/oss-security/2011/10/26/6 http://trac.roundcube.net/ticket/1488086 webmail-uri-dos(71025) https://exchange.xforce.ibmcloud.com/vulnerabilities/71025
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.