4991 matches found
evolution malicious server arbitrary code execution
Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...
Important: Red Hat Security Advisory: evolution-data-server security update
Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...
Important: evolution security update
2.0.2-35.0.4.el4 - Bump seamonkeybuildversion to 1.0.9. 2.0.2-35.0.3.el4 - Add patch for RH bug 244291 Camel IMAP security flaw...
[SECURITY] [DSA 1321-1] New evolution-data-server packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1321-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 23rd, 2007 http://www.debian.org/security/faq -...
evolution-data-server -- remote execution of arbitrary code vulnerability
Debian project reports: It was discovered that the IMAP code in the Evolution Data Server performs insufficient sanitising of a value later used an array index, which can lead to the execution of arbitrary code...
DSA-1321-1 evolution-data-server
Bulletin has no description...
[Full-disclosure] [USN-475-1] evolution-data-server vulnerability
=========================================================== Ubuntu Security Notice USN-475-1 June 21, 2007 evolution-data-server vulnerability CVE-2007-3257 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu...
Evolution Data Server integer overflow
Integer overflow in Camel mailer component on negative value of IMAP server SEQUENCE command reply...
USN-475-1: evolution-data-server vulnerability
Philip Van Hoof discovered that the IMAP client in Evolution did not correctly verify the SEQUENCE value. A malicious or spoofed server could exploit this to execute arbitrary code with user privileges...
Code injection
Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...
CVE-2007-3257
Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...
CVE-2007-3257
Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...
DEBIAN-CVE-2007-3257
Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...
CVE-2007-3257
Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...
CVE-2007-3257
Concretely affected: Evolution Data Server (imap-folder.c in the mailer component). The flaw arises from handling a negative SEQUENCE value used as an array index in GData, enabling remote IMAP servers to potentially execute arbitrary code. This is evidenced in CVE-2007-3257 with public advisorie...
CVE-2007-3257
Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...
IMAP User ID Enumeration
Binary data 4098.prm...
CVE-2007-3166
Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command...