Lucene search
UbuntuUSN-733-1HistoryMar 16, 2009 - 12:00 a.m.
evolution-data-server vulnerability
2009-03-1600:00:00
ubuntu.com
47
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0.018
Percentile
88.2%
Releases
- Ubuntu 7.10
- Ubuntu 6.06
Packages
- evolution-data-server -
Details
It was discovered that the Base64 encoding functions in
evolution-data-server did not properly handle large strings. If a user were
tricked into opening a specially crafted image file, or tricked into
connecting to a malicious server, an attacker could possibly execute
arbitrary code with user privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 7.10 | noarch | libcamel1.2-10 | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | evolution-data-server | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | evolution-data-server-dbg | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | evolution-data-server-dev | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libcamel1.2-dev | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libebook1.2-9 | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libebook1.2-dev | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libecal1.2-7 | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libecal1.2-dev | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libedata-book1.2-2 | <Β 1.12.1-0ubuntu2.1 | UNKNOWN |
References
Related
ubuntucve
ubuntucve
CVE-2009-0587
2009-03-14 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:31:26
cvelist
cvelist
CVE-2009-0587
2009-03-14 18:00:00
debiancve
debiancve
CVE-2009-0587
2009-03-14 18:30:00
cve
cve
CVE-2009-0587
2009-03-14 18:30:00
oraclelinux
oraclelinux
evolution security update
2009-03-16 00:00:00
evolution and evolution-data-server security update
2009-03-16 00:00:00
evolution-data-server security update
2009-03-16 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 7.10 : evolution-data-server vulnerability (USN-733-1)
2009-04-23 00:00:00
CentOS 3 : evolution (CESA-2009:0358)
2009-03-17 00:00:00
Scientific Linux Security Update : evolution on SL3.x i386/x86_64
2012-08-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-733-1)
2009-03-19 00:00:00
RedHat Security Advisory RHSA-2009:0358
2009-03-20 00:00:00
CentOS Update for evolution CESA-2009:0358 centos3 i386
2011-08-09 00:00:00
nvd
nvd
CVE-2009-0587
2009-03-14 18:30:00
prion
prion
Integer overflow
2009-03-14 18:30:00
redhat
redhat
(RHSA-2009:0358) Moderate: evolution security update
2009-03-16 00:00:00
(RHSA-2009:0354) Moderate: evolution-data-server security update
2009-03-16 00:00:00
centos
centos
evolution security update
2009-03-17 09:02:02
evolution security update
2009-03-17 17:18:35
evolution28 security update
2009-03-17 17:19:33
debian
debian
securityvulns
securityvulns
Evolution Data Server multiple security vulnerabilities
2009-03-24 00:00:00
[ MDVSA-2009:078 ] evolution-data-server
2009-03-24 00:00:00
glib library memory corruption
2009-03-15 00:00:00
osv
osv
evolution-data-server - several vulnerabilities
2009-06-08 00:00:00
seebug
seebug
GNOME glib Base64ηΌη 解η ε€δΈͺζ΄ζ°ζΊ’εΊζΌζ΄
2009-03-14 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0.018
Percentile
88.2%
Related for USN-733-1