GNOME Evolution Insecure Connection Stored Folder Information Disclosure Vulnerability
BID:49547
Info
GNOME Evolution Insecure Connection Stored Folder Information Disclosure Vulnerability
| Bugtraq ID: | 49547 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 09 2011 12:00AM |
| Updated: | Sep 09 2011 12:00AM |
| Credit: | Matthew Barnes |
| Vulnerable: |
GNOME Evolution 2.62.2 GNOME Evolution 2.24.5 GNOME Evolution 2.22.2 GNOME Evolution 2.22.1 GNOME Evolution 2.22 GNOME Evolution 2.12.3 GNOME Evolution 2.12.1 GNOME Evolution 2.10.1 GNOME Evolution 2.8.1 GNOME Evolution 2.8 GNOME Evolution 2.6.1 GNOME Evolution 2.3.7 GNOME Evolution 2.3.6 .1 GNOME Evolution 2.3.6 GNOME Evolution 2.3.5 GNOME Evolution 2.3.4 GNOME Evolution 2.3.3 GNOME Evolution 2.3.2 GNOME Evolution 2.3.1 GNOME Evolution 2.2.3 GNOME Evolution 2.2.1 GNOME Evolution 2.2 GNOME Evolution 2.1 GNOME Evolution 2.0.4 GNOME Evolution 2.0.1 GNOME Evolution 2.0 GNOME Evolution 1.5 GNOME Evolution 1.0.5 GNOME Evolution 2.8.2.1 |
| Not Vulnerable: | |
Discussion
GNOME Evolution Insecure Connection Stored Folder Information Disclosure Vulnerability
GNOME Evolution is prone to an information-disclosure vulnerability.
Attackers can exploit this issue through man-in-the-middle attacks to gain access to sensitive information such as login credentials. Successful exploits may allow attackers to gain unauthorized access to the email account.
GNOME Evolution is prone to an information-disclosure vulnerability.
Attackers can exploit this issue through man-in-the-middle attacks to gain access to sensitive information such as login credentials. Successful exploits may allow attackers to gain unauthorized access to the email account.
Exploit / POC
GNOME Evolution Insecure Connection Stored Folder Information Disclosure Vulnerability
An attacker can exploit this issue by using readily available network utilities.
An attacker can exploit this issue by using readily available network utilities.
Solution / Fix
GNOME Evolution Insecure Connection Stored Folder Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
GNOME Evolution Insecure Connection Stored Folder Information Disclosure Vulnerability
References:
References:
- Bug 648277 - Evolution doesn't used secured IMAP connection after sending a mess (Milan Chra)
- Evolution Homepage (GNOME)
- index : evolution-data-server (Matthew Barnes)