Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2005-2549
HistoryAug 12, 2005 - 4:00 a.m.

CVE-2005-2549

2005-08-1204:00:00
redhat
web.nvd.nist.gov
43
cve-2005-2549
evolution
format string vulnerabilities
denial of service
remote code execution
vcard data
ldap
task list data

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.075

Percentile

94.2%

JSON

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.

Affected configurations

Nvd
Node
gnomeevolutionMatch1.5
OR
gnomeevolutionMatch2.0
OR
gnomeevolutionMatch2.1
OR
gnomeevolutionMatch2.2
OR
gnomeevolutionMatch2.3.1
OR
gnomeevolutionMatch2.3.2
OR
gnomeevolutionMatch2.3.3
OR
gnomeevolutionMatch2.3.4
OR
gnomeevolutionMatch2.3.5
OR
gnomeevolutionMatch2.3.6.1
VendorProductVersionCPE
gnomeevolution2.3.4cpe:/a:gnome:evolution:2.3.4:::
gnomeevolution2.3.5cpe:/a:gnome:evolution:2.3.5:::
gnomeevolution2.3.3cpe:/a:gnome:evolution:2.3.3:::
gnomeevolution2.1cpe:/a:gnome:evolution:2.1:::
gnomeevolution2.2cpe:/a:gnome:evolution:2.2:::
gnomeevolution2.3.2cpe:/a:gnome:evolution:2.3.2:::
gnomeevolution2.3.6.1cpe:/a:gnome:evolution:2.3.6.1:::
gnomeevolution2.3.1cpe:/a:gnome:evolution:2.3.1:::
gnomeevolution2.0cpe:/a:gnome:evolution:2.0:::
gnomeevolution1.5cpe:/a:gnome:evolution:1.5:::

Related

ubuntucve 1
cvelist 1
debiancve 1
nvd 1
nessus 8
redhat 1
openvas 6
debian 2
osv 1
freebsd 1
suse 1
gentoo 1
centos 1
ubuntucve
ubuntucve
CVE-2005-2549
2005-08-12 00:00:00
cvelist
cvelist
CVE-2005-2549
2005-08-12 04:00:00
debiancve
debiancve
CVE-2005-2549
2005-08-12 04:00:00
nvd
nvd
CVE-2005-2549
2005-08-12 04:00:00
nessus
nessus
CentOS 3 / 4 : Evolution (CESA-2005:267)
2006-07-05 00:00:00
Debian DSA-1016-1 : evolution - format string vulnerabilities
2006-10-14 00:00:00
Mandrake Linux Security Advisory : evolution (MDKSA-2005:141)
2005-10-05 00:00:00
redhat
redhat
(RHSA-2005:267) Evolution security update
2005-08-29 00:00:00
openvas
openvas
Debian Security Advisory DSA 1016-1 (evolution)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200508-12 (evolution)
2008-09-24 00:00:00
FreeBSD Ports: evolution
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1016-1] New evolution packages fix arbitrary code execution
2006-03-23 13:42:27
[SECURITY] [DSA 1016-1] New evolution packages fix arbitrary code execution
2006-03-23 13:42:27
osv
osv
evolution - format string vulnerabilities
2006-03-23 00:00:00
freebsd
freebsd
evolution -- remote format string vulnerabilities
2005-08-10 00:00:00
suse
suse
remote code execution in evolution
2005-09-16 13:05:45
gentoo
gentoo
Evolution: Format string vulnerabilities
2005-08-23 00:00:00
centos
centos
evolution security update
2005-08-29 19:46:26

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.075

Percentile

94.2%

JSON
Related for CVE-2005-2549
ubuntucve1cvelist1debiancve1nvd1nessus8redhat1openvas6debian2osv1freebsd1suse1gentoo1centos1