PT-2009-6713 · Gnome+2 · Evolution Data Server+4

Tomas Hoger · Published 1970-01-01 · Updated 2017-09-29 · CVE-2009-0582

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libedataserverui1.2-8 libedataserver1.2-7 libedataserverui1.2-6 libedataserver1.2-9 libedataserver1.2-dev libgdata1.2-1 libgdata1.2-dev Evolution Data Server versions 2.24.5 and earlier, 2.25.92 and earlier 2.25.x versions

Description The issue concerns multiple vulnerabilities in the Evolution Data Server and related packages in Debian GNU/Linux. These vulnerabilities can lead to breaches in confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. Specifically, the ntlm challenge function in the NTLM SASL authentication mechanism does not validate the consistency of a certain length value with the amount of data in a challenge packet. This allows remote mail servers to read information from the process memory of a client or cause a denial of service via an NTLM authentication type 2 packet with an excessive length value.

Recommendations For Evolution Data Server versions 2.24.5 and earlier, 2.25.92 and earlier 2.25.x versions, update to a version that addresses these vulnerabilities. For libedataserverui1.2-8, libedataserver1.2-7, libedataserverui1.2-6, libedataserver1.2-9, libedataserver1.2-dev, libgdata1.2-1, libgdata1.2-dev, consider updating to the latest available versions or patches provided by Debian GNU/Linux to mitigate the risk. As a temporary workaround, consider restricting access to NTLM authentication mechanisms until a patch is available. Avoid using NTLM authentication type 2 packets with excessive length values in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability in some of the affected packages.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

CWE-310

Related Identifiers

BDU:2015-03335

BDU:2015-03336

BDU:2015-03337

BDU:2015-03338

BDU:2015-03339

BDU:2015-03340

BDU:2015-03341

BDU:2015-03342

CVE-2009-0582

DSA-1813-1

RHSA-2009:0354

RHSA-2009:0355

RHSA-2009:0358

RHSA-2009_0354

RHSA-2009_0355

Affected Products

Debian

Evolution Data Server

Red Hat

Libedataserverui1.2

Libgdata1.2

References · 44

• http://secunia.com/advisories/34286 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03336 · Security Note
• http://redhat.com/support/errata/RHSA-2009-0358.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0354.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0582 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:078 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00672.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0582 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0582 · Security Note
• http://debian.org/security/2009/dsa-1813 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0587 · Security Note
• https://osv.dev/vulnerability/CVE-2009-0582 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03337 · Security Note
• https://bdu.fstec.ru/vul/2015-03335 · Security Note