PT-2005-3443 · Evolution+1 · Evolution+1

Ulf Härnhammar · Publicado 2005-08-12 · Atualizado 2018-10-03 · CVE-2005-2550

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Evolution versions 1.4 through 2.3.6.1

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via calendar entries, such as task lists, which are not properly handled when the user selects the Calendars tab.

Recommendations For versions 1.4 through 2.3.6.1, consider restricting access to calendar entries until a patch is available. As a temporary workaround, avoid selecting the Calendars tab to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2550

DSA-1016-1

DTSA-13-1

RHSA-2005:267

RHSA-2005_267

Produtos afetados

Evolution

Red Hat

Referências · 20

• https://osv.dev/vulnerability/CVE-2005-2550 · Aviso do Fabricante
• http://securityfocus.com/archive/1/407789 · Nota
• http://debian.org/security/2006/dsa-1016 · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-2549.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2550 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2550 · Aviso do Fabricante
• http://marc.info/?l=full-disclosure&m=112368237712032&w=2 · Nota
• http://secunia.com/advisories/16394 · Nota
• http://redhat.com/archives/fedora-announce-list/2005-August/msg00031.html · Aviso do Fabricante
• http://secunia.com/advisories/19380 · Nota
• http://novell.com/linux/security/advisories/2005_54_evolution.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2550 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2005:141 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10880 · Nota
• https://usn.ubuntu.com/166-1 · Aviso do Fabricante