PT-2014-2769 · Gilles Lamiral · Imapsync

CVE-2013-4279 · Publicado 2014-03-12 · Atualizado 2023-06-07

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions imapsync versions 1.564 and earlier

Description The issue concerns the default behavior of performing a release check, which results in sending sensitive information, including imapsync version, operating system, and Perl version, to the developer's site.

Recommendations For versions 1.564 and earlier, consider disabling the release check feature to prevent the transmission of sensitive information.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-4279

MGASA-2014-0127

Produtos afetados

Imapsync

Referências · 9

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1000215 · Exploit
• https://bugs.mageia.org/show_bug.cgi?id=12985 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4279 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2014-0127 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130493.html · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2014-0127.html · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2014:060 · Aviso do Fabricante
• http://securityfocus.com/bid/65002 · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2014-March/129687.html · Aviso do Fabricante