CVE-2011-1492

Related Files

Mandriva Linux Security Advisory 2012-072

Posted May 10, 2012

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2012-072 - The login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account and then compose an e-mail message, related to a login CSRF issue. Various other issues have also been addressed.

tags | advisory, remote

systems | linux, mandriva

advisories | CVE-2011-1491, CVE-2011-1492, CVE-2011-2937, CVE-2011-4078

SHA-256 | 5db9be97f39831d6baffca7927339627ba7442fb01a60c527592f9e5db93ccb8

Download | Favorite | View