PT-2005-3442 · Evolution+1 · Evolution+1

Ulf Härnhammar · Publicado 2005-08-12 · Atualizado 2018-10-03 · CVE-2005-2549

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Evolution versions 1.5 through 2.3.6.1

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple format string vulnerabilities. These vulnerabilities can be exploited through full vCard data, contact data from remote LDAP servers, or task list data from remote servers.

Recommendations For Evolution versions 1.5 through 2.3.6.1, update to a version that contains a fix for this issue to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2005-2549

DSA-1016-1

DTSA-13-1

RHSA-2005:267

RHSA-2005_267

Produtos afetados

Evolution

Red Hat

Referências · 20

• https://nvd.nist.gov/vuln/detail/CVE-2005-2549 · Nota de Segurança
• http://securityfocus.com/archive/1/407789 · Nota
• http://debian.org/security/2006/dsa-1016 · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-2549.html · Nota
• http://marc.info/?l=full-disclosure&m=112368237712032&w=2 · Nota
• http://secunia.com/advisories/16394 · Nota
• http://redhat.com/archives/fedora-announce-list/2005-August/msg00031.html · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2005_54_evolution.html · Aviso do Fabricante
• http://secunia.com/advisories/19380 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2005:141 · Aviso do Fabricante
• https://usn.ubuntu.com/166-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2549 · Aviso do Fabricante
• http://sitic.se/eng/advisories_and_recommendations/sa05-001.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9553 · Nota
• https://rhn.redhat.com/errata/RHSA-2005-267.html · Nota