PT-2005-3443 · Evolution+1 · Evolution+1

Ulf Härnhammar · Published 2005-08-12 · Updated 2018-10-03 · CVE-2005-2550

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Evolution versions 1.4 through 2.3.6.1

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via calendar entries, such as task lists, which are not properly handled when the user selects the Calendars tab.

Recommendations For versions 1.4 through 2.3.6.1, consider restricting access to calendar entries until a patch is available. As a temporary workaround, avoid selecting the Calendars tab to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2550

DSA-1016-1

DTSA-13-1

RHSA-2005:267

RHSA-2005_267

Affected Products

Evolution

Red Hat

References · 20

• https://osv.dev/vulnerability/CVE-2005-2550 · Vendor Advisory
• http://debian.org/security/2006/dsa-1016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2550 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2550 · Vendor Advisory
• http://redhat.com/archives/fedora-announce-list/2005-August/msg00031.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_54_evolution.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2550 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:141 · Vendor Advisory
• https://usn.ubuntu.com/166-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-267.html · Vendor Advisory
• http://securityfocus.com/archive/1/407789 · Note
• https://redhat.com/security/data/cve/CVE-2005-2549.html · Note
• http://marc.info/?l=full-disclosure&m=112368237712032&w=2 · Note
• http://secunia.com/advisories/16394 · Note
• http://secunia.com/advisories/19380 · Note