PT-2014-2769 · Gilles Lamiral · Imapsync

Published 2014-03-12 · Updated 2023-06-07 · CVE-2013-4279

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions imapsync versions 1.564 and earlier

Description The issue concerns the default behavior of performing a release check, which results in sending sensitive information, including imapsync version, operating system, and Perl version, to the developer's site.

Recommendations For versions 1.564 and earlier, consider disabling the release check feature to prevent the transmission of sensitive information.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-4279

MGASA-2014-0127

Affected Products

Imapsync

References · 9

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1000215 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4279 · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0127 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130493.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0127.html · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2014:060 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2014-March/129687.html · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=12985 · Note
• http://securityfocus.com/bid/65002 · Note