CVE-2009-1631

Evolution 2.26.1 and earlier contains a local information‑disclosure issue in the Mailer component: .evolution directory (and related subpaths) has world‑readable permissions, enabling local users to read sensitive mail-related files. Root cause is file/directory permissions, not a remote/vector-...

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

CVE-2009-1631: Undefined Security Weakness

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

Art Coviello on Holistic Security, the Future of the Security Industry and the RSA Conference

For the landmark 10th episode of the Digital Underground podcast, Dennis Fisher talks with Art Coviello, president of RSA, the security division of EMC, about the evolution of the RSA Conference, the future of the security industry and whether the compliance mentality is taking the focus off...

openSUSE 10 Security Update : evolution-data-server (evolution-data-server-6171)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets CVE-2009-0582. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2009-1457

Cross-site scripting XSS vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1457

Cross-site scripting XSS vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1457

CVE-2009-1457 describes a cross-site scripting (XSS) vulnerability in the player.php component of Nuke Evolution Xtreme 2.x, exploitable via the defaultVisualExt parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents confirm the affected produ...

[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-11.fc9

This is an evolution plugin which enables evolution to read rss feeds...

CVE-2009-1457: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

MDKA-2007:061 : evolution

A large number of bugs in Evolution are corrected with this update, including the use of non-english locales. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDKA-2007:130 : evolution-data-server

A reference leak prevented evolution-data-server to correctly shutdown when terminating a GNOME session. This prevented some programs to start correctly when login back after a logout. Updated package fixes this issue, and include stability fixes for Evolution mail client GNOME bugs 271777, 48835...

MDVA-2009:048 : evolution

This update prevents unwanted dependency with gpilotd bug 46302. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

MDVA-2008:186-1 : evolution

Outgoing mails sent through the Evolution Exchange plugin were not always sent properly. Spell checking was not working properly when two different languages were enabled, causing all words to be detected as mistyped. Those bugs are fixed by this package updates, as well as massive performance...

MDVA-2008:186 : evolution

Outgoing mails sent through the Evolution Exchange plugin were not always sent properly. Spell checking was not working properly when two different languages were enabled, causing all words to be detected as mistyped. Those bugs are fixed by this package updates, as well as massive performance...

MDVA-2008:029 : evolution

A bug in Evolution was preventing the adding of remote calendars, which caused the application to crash. This update provides Evolution 2.12.3 which fixes this bug and other crash bugs, as well as including translation updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

Ubuntu 6.06 LTS / 7.10 : evolution-data-server vulnerability (USN-733-1)

It was discovered that the Base64 encoding functions in evolution-data-server did not properly handle large strings. If a user were tricked into opening a specially crafted image file, or tricked into connecting to a malicious server, an attacker could possibly execute arbitrary code with user...