evolution security update

2007-05-1716:27:09

CentOS Project

lists.centos.org

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

EPSS

0.088

Percentile

94.6%

JSON

CentOS Errata and Security Advisory CESA-2007:0353

Evolution is the GNOME collection of personal information management (PIM)
tools.

A flaw was found in the way Evolution processed certain APOP authentication
requests. A remote attacker could potentially acquire certain portions of a
user’s authentication credentials by sending certain responses when
evolution-data-server attempted to authenticate against an APOP server.
(CVE-2007-1558)

All users of Evolution should upgrade to these updated packages, which
contain a backported patch which resolves this issue.

Affected packages:
evolution
evolution-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0353

OSVersionArchitecturePackageVersionFilename
CentOS4ia64evolution< 2.0.2-35.0.2.el4evolution-2.0.2-35.0.2.el4.ia64.rpm
CentOS4ia64evolution-devel< 2.0.2-35.0.2.el4evolution-devel-2.0.2-35.0.2.el4.ia64.rpm
CentOS3ia64evolution< 1.4.5-20.el3evolution-1.4.5-20.el3.ia64.rpm
CentOS3ia64evolution-devel< 1.4.5-20.el3evolution-devel-1.4.5-20.el3.ia64.rpm
CentOS3i386evolution< 1.4.5-20.el3evolution-1.4.5-20.el3.i386.rpm
CentOS3i386evolution-devel< 1.4.5-20.el3evolution-devel-1.4.5-20.el3.i386.rpm
CentOS3x86_64evolution< 1.4.5-20.el3evolution-1.4.5-20.el3.x86_64.rpm
CentOS3x86_64evolution-devel< 1.4.5-20.el3evolution-devel-1.4.5-20.el3.x86_64.rpm
CentOS4x86_64evolution< 2.0.2-35.0.2.el4evolution-2.0.2-35.0.2.el4.x86_64.rpm
CentOS4x86_64evolution-devel< 2.0.2-35.0.2.el4evolution-devel-2.0.2-35.0.2.el4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	evolution	< 2.0.2-35.0.2.el4	evolution-2.0.2-35.0.2.el4.ia64.rpm
CentOS	4	ia64	evolution-devel	< 2.0.2-35.0.2.el4	evolution-devel-2.0.2-35.0.2.el4.ia64.rpm
CentOS	3	ia64	evolution	< 1.4.5-20.el3	evolution-1.4.5-20.el3.ia64.rpm
CentOS	3	ia64	evolution-devel	< 1.4.5-20.el3	evolution-devel-1.4.5-20.el3.ia64.rpm
CentOS	3	i386	evolution	< 1.4.5-20.el3	evolution-1.4.5-20.el3.i386.rpm
CentOS	3	i386	evolution-devel	< 1.4.5-20.el3	evolution-devel-1.4.5-20.el3.i386.rpm
CentOS	3	x86_64	evolution	< 1.4.5-20.el3	evolution-1.4.5-20.el3.x86_64.rpm
CentOS	3	x86_64	evolution-devel	< 1.4.5-20.el3	evolution-devel-1.4.5-20.el3.x86_64.rpm
CentOS	4	x86_64	evolution	< 2.0.2-35.0.2.el4	evolution-2.0.2-35.0.2.el4.x86_64.rpm
CentOS	4	x86_64	evolution-devel	< 2.0.2-35.0.2.el4	evolution-devel-2.0.2-35.0.2.el4.x86_64.rpm