Debian Roundcube vulnerabilities

CVE-2015-1433 [MEDIUM] CVE-2015-1433: roundcube - program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not prope... program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the style attribute in an email. Scope: local bookworm: resolved (fixed in 0.9.5+dfsg1-4.2) bullseye: resolved (fixed in 0.9.5+dfsg1-4.2) forky: resolved (fixed in 0.9.5+dfsg1-4.2) sid: r

CVE-2015-8105 [LOW] CVE-2015-8105: roundcube - Cross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webma... Cross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload. Scope: local bookworm: resolved (fixed in 1.1.3+dfsg.1-1) bullseye: resolved (fixed in 1.1.3+dfsg.1-1) forky: resolved (fixed in

CVE-2015-5383 [HIGH] CVE-2015-5383: roundcube - Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive... Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2014-9587 [MEDIUM] CVE-2014-9587: roundcube - Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail ... Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to (1) address book operations or the (2) ACL or (3) Managesieve plugins. Scope: local bookworm: resolved (fixed in 1.1.1+dfsg.1-2) bullseye: resolved (fixed in 1.1.1+df

CVE-2013-6172 [HIGH] CVE-2013-6172: roundcube - steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9... steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the _session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code. Scope: local bookworm: resolved (fixed in 0.9.4-1.1) bullseye: resolved (fixed in 0.9.4-1.1)

CVE-2013-5645 [MEDIUM] CVE-2013-5645: roundcube - Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before ... Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related

CVE-2013-1904 [MEDIUM] CVE-2013-1904: roundcube - Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube We... Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013. Scope: local bookworm: resolved (fixe

CVE-2013-5646 [LOW] CVE-2013-5646: roundcube - Cross-site scripting (XSS) vulnerability in Roundcube webmail 1.0-git allows rem... Cross-site scripting (XSS) vulnerability in Roundcube webmail 1.0-git allows remote authenticated users to inject arbitrary web script or HTML via the Name field of an addressbook group. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2012-4668 [MEDIUM] CVE-2012-4668: roundcube - Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier ... Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email. Scope: local bookworm: resolved (fixed in 0.7.2-4) bullseye: resolved (fixed in 0.7.2-4) forky: resolved (fixed in 0.7.2-4) sid: resolved (fixed in 0.7.2-4) trixie: resolved (fixed in 0.7.2-4)

CVE-2012-3508 [MEDIUM] CVE-2012-3508: roundcube - Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube... Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email. Scope: local bookworm: resolved (fixed in 0.7.2-4) bullseye: resolved (fixed in 0.7.2-4) forky: resolved (fixed in 0.7.2-4)

CVE-2012-6121 [MEDIUM] CVE-2012-6121: roundcube - Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allow... Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML via a (1) data:text or (2) vbscript link. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2012-3507 [LOW] CVE-2012-3507: roundcube - Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in Round... Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2012-1253 [LOW] CVE-2012-1253: roundcube - Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when I... Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment. Scope: local bookworm: resolved (fixed in 0.7-1) bullseye: resolved (fixed in 0.7-1) forky: resolved (fixed in 0.7-1) sid: resolved (fixed in 0.7-1)

CVE-2011-4078 [HIGH] CVE-2011-4078: roundcube - include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3... include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service (resource consumption and inbox outage), via a Subject header containing only a URL, a related issue to CVE-2011-3379. Scope: local bookworm: resolved (fixed in 0.6+dfsg-1) bu

CVE-2011-1492 [MEDIUM] CVE-2011-1492: roundcube - steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verif... steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets (CSS) stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain sensitive information, via a crafted request. Scope: local bookwor

CVE-2011-2937 [MEDIUM] CVE-2011-2937: roundcube - Cross-site scripting (XSS) vulnerability in the UI messages functionality in Rou... Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default URI. Scope: local bookworm: resolved (fixed in 0.5.4+dfsg-1) bullseye: resolved (fixed in 0.5.4+dfsg-1) forky: resolved (fixed in 0.5.4+dfsg-1) sid: resolve

CVE-2011-1491 [LOW] CVE-2011-1491: roundcube - The login form in Roundcube Webmail before 0.5.1 does not properly handle a corr... The login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account and then compose an e-mail message, related to a "login CSRF" issue. Scope: local bookworm: r

CVE-2010-0464 [MEDIUM] CVE-2010-0464: roundcube - Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS pref... Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests. Scope: local bookworm: resolved (fixed in 0.3.1-3) bullseye: resolved (fixed in 0.3.1-3) forky: resolved (fixe

CVE-2009-4076 [MEDIUM] CVE-2009-4076: roundcube - Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and e... Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077. Scope: local bookworm: resolved (fixed in 0.3-1) bullseye: resolved (fixed in 0.3-1) forky:

CVE-2009-4077 [MEDIUM] CVE-2009-4077: roundcube - Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and e... Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076. Scope: local bookworm: resolved (fixed in 0.3-1) bullseye: resolved (fixed in 0.3-1) forky: re