PT-2005-3442 · Evolution+1 · Evolution+1

Ulf Härnhammar · Published 2005-08-12 · Updated 2018-10-03 · CVE-2005-2549

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Evolution versions 1.5 through 2.3.6.1

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple format string vulnerabilities. These vulnerabilities can be exploited through full vCard data, contact data from remote LDAP servers, or task list data from remote servers.

Recommendations For Evolution versions 1.5 through 2.3.6.1, update to a version that contains a fix for this issue to prevent potential exploitation.

Fix

Related Identifiers

CVE-2005-2549

DSA-1016-1

DTSA-13-1

RHSA-2005:267

RHSA-2005_267

Affected Products

Evolution

Red Hat

References · 20

• https://nvd.nist.gov/vuln/detail/CVE-2005-2549 · Security Note
• http://debian.org/security/2006/dsa-1016 · Vendor Advisory
• http://redhat.com/archives/fedora-announce-list/2005-August/msg00031.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_54_evolution.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:141 · Vendor Advisory
• https://usn.ubuntu.com/166-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2549 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-2549 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2549 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-267.html · Vendor Advisory
• http://securityfocus.com/archive/1/407789 · Note
• https://redhat.com/security/data/cve/CVE-2005-2549.html · Note
• http://marc.info/?l=full-disclosure&m=112368237712032&w=2 · Note
• http://secunia.com/advisories/16394 · Note
• http://secunia.com/advisories/19380 · Note