Lucene search
PRIOn knowledge basePRION:CVE-2013-4166HistoryFeb 06, 2020 - 3:15 p.m.
Information disclosure
2020-02-0615:15:00
PRIOn knowledge base
www.prio-n.com
7
The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers to obtain sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| evolution | le | 3.8.4 | |
| evolution_data_server | le | 3.9.5 | |
| enterprise_linux_desktop | eq | 6.0 | |
| enterprise_linux_server | eq | 6.0 | |
| enterprise_linux_workstation | eq | 6.0 |
References
rhn.redhat.com/errata/RHSA-2013-1540.html
seclists.org/oss-sec/2013/q3/191
bugzilla.redhat.com/show_bug.cgi?id=973728
git.gnome.org/browse/evolution-data-server/commit/?h=gnome-3-8&id=f7059bb37dcce485d36d769142ec9515708d8ae5
git.gnome.org/browse/evolution-data-server/commit/?id=5d8b92c622f6927b253762ff9310479dd3ac627d
Related
centos
centos
openvas
openvas
RedHat Update for evolution RHSA-2013:1540-02
2013-11-21 00:00:00
Ubuntu Update for evolution-data-server USN-1922-1
2013-08-08 00:00:00
RedHat Update for evolution RHSA-2013:1540-02
2013-11-21 00:00:00
ubuntucve
ubuntucve
CVE-2013-4166
2013-07-26 00:00:00
cvelist
cvelist
CVE-2013-4166
2020-02-06 14:29:39
nessus
nessus
CentOS 6 : cheese / control-center / ekiga / evolution / evolution-data-server / etcgnome-panel / etc (CESA-2013:1540)
2014-11-12 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : evolution-data-server vulnerability (USN-1922-1)
2013-08-01 00:00:00
Scientific Linux Security Update : evolution on SL6.x i386/x86_64 (20131121)
2013-12-10 00:00:00
securityvulns
securityvulns
Evolution / libcamel messages encryption vulnerabilities
2013-10-09 00:00:00
[USN-1922-1] Evolution Data Server vulnerability
2013-10-09 00:00:00
oraclelinux
oraclelinux
evolution security, bug fix, and enhancement update
2013-11-21 00:00:00
ubuntu
ubuntu
Evolution Data Server vulnerability
2013-07-31 00:00:00
cve
cve
CVE-2013-4166
2020-02-06 15:15:10
veracode
veracode
Wrong GPG Key Selection
2019-01-15 09:01:44
mageia
mageia
Updated evolution-data-server package fixes security vulnerability.
2013-08-11 16:28:03
nvd
nvd
CVE-2013-4166
2020-02-06 15:15:10
redhat
redhat
(RHSA-2013:1540) Low: evolution security, bug fix, and enhancement update
2013-11-21 00:00:00
debiancve
debiancve
CVE-2013-4166
2020-02-06 15:15:10