CVE:CVE-2010-0464
CNNVD:CNNVD-201001-300
Roundcube 0.3.1版本及其早期版本不能要求web浏览器避免包含在邮件信息中的域名的DNS事先提取，更易于远程攻击者通过登录DNS请求确定网络邮件用户的网络位置。
solution:Upgrade roundcube webmail to a higher version than 0.3.1,0.1,0.1:20050811,0.1:20050820,0.1:20051007,0.1:20051021,0.1:alpha,0.1:beta,0.1:beta2,0.1:rc1,0.1:rc2,0.1:stable,0.1.1,0.2,0.2:alpha,0.2:beta,0.2:stable,0.2.1,0.2.2,0.3,0.3:beta,0.3:rc1,0.3:stable,and avoid the version (,0.3.1],0.1,0.1:20050811,0.1:20050820,0.1:20051007,0.1:20051021,0.1:alpha,0.1:beta,0.1:beta2,0.1:rc1,0.1:rc2,0.1:stable,0.1.1,0.2,0.2:alpha,0.2:beta,0.2:stable,0.2.1,0.2.2,0.3,0.3:beta,0.3:rc1,0.3:stable