Search for packages
| purl | pkg:deb/debian/evolution-data-server@1.6.3-5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-67d5-ftaf-8yhj
Aliases: CVE-2007-3257 |
The IMAP client of Evolution contains a vulnerability potentially leading to the execution of arbitrary code. |
Affected by 7 other vulnerabilities. |
|
VCID-6ftk-sw8b-r7aj
Aliases: CVE-2026-2604 |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
|
VCID-81gc-n129-skh5
Aliases: CVE-2016-10727 |
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly. |
Affected by 4 other vulnerabilities. |
|
VCID-e4xa-phk6-7ugb
Aliases: CVE-2009-0582 |
The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data. |
Affected by 5 other vulnerabilities. |
|
VCID-jn6d-sq5u-vqax
Aliases: CVE-2009-0587 |
Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel. |
Affected by 7 other vulnerabilities. |
|
VCID-kkeu-j7jt-vyea
Aliases: CVE-2020-14928 |
Affected by 3 other vulnerabilities. Affected by 1 other vulnerability. |
|
|
VCID-ta3p-yt6t-2fb6
Aliases: CVE-2020-16117 |
Affected by 1 other vulnerability. |
|
|
VCID-w3r7-4cec-2fc4
Aliases: CVE-2009-0547 |
Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077. |
Affected by 5 other vulnerabilities. |
|
VCID-xhde-6dpj-8ubp
Aliases: CVE-2018-12422 |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||