BDU:2015-03337

Опубликовано: 01 янв. 2015

Источник: fstec

CVSS2: 7.5

EPSS Низкий

Описание

Множественные уязвимости пакета libedataserver1.2-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Вендор

Сообщество свободного программного обеспечения

Наименование ПО

Debian GNU/Linux

Версия ПО

до 4 (Debian GNU/Linux)

Тип ПО

Операционная система

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,5)

Возможные меры по устранению уязвимости

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:

Debian GNU/Linux 4:

ppc:

libcamel1.2-dev - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libedataserverui1.2-6 - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

s390x:

libedataserver1.2-7 - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libedataserverui1.2-6 - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libcamel1.2-dev - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

i686:

libexchange-storage1.2-dev - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libcamel1.2-dev - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

libedataserverui1.2-6 - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

sparc:

libedataserverui1.2-6 - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libcamel1.2-dev - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

x86-64:

libedataserver1.2-dev - 1.6.3-5etch2

libedataserverui1.2-6 - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

libcamel1.2-dev - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

alpha:

evolution-data-server - 1.6.3-5etch2

libedataserverui1.2-6 - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libcamel1.2-dev - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

ia64:

evolution-data-server-dbg - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

libcamel1.2-dev - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libedataserverui1.2-6 - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

mips:

libedataserverui1.2-6 - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

libcamel1.2-dev - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

noarch:

evolution-data-server-common - 1.6.3-5etch2

mipsel:

libedata-cal1.2-dev - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

libcamel1.2-dev - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libedataserverui1.2-6 - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

arm:

libcamel1.2-dev - 1.6.3-5etch2

libexchange-storage1.2-dev - 1.6.3-5etch2

evolution-data-server-dbg - 1.6.3-5etch2

libecal1.2-6 - 1.6.3-5etch2

libecal1.2-dev - 1.6.3-5etch2

libedataserverui1.2-6 - 1.6.3-5etch2

libedataserverui1.2-dev - 1.6.3-5etch2

evolution-data-server-dev - 1.6.3-5etch2

libegroupwise1.2-dev - 1.6.3-5etch2

libedata-book1.2-dev - 1.6.3-5etch2

libedata-book1.2-2 - 1.6.3-5etch2

libcamel1.2-8 - 1.6.3-5etch2

libedataserver1.2-7 - 1.6.3-5etch2

libexchange-storage1.2-1 - 1.6.3-5etch2

libedata-cal1.2-dev - 1.6.3-5etch2

libebook1.2-dev - 1.6.3-5etch2

libebook1.2-5 - 1.6.3-5etch2

libedata-cal1.2-5 - 1.6.3-5etch2

libegroupwise1.2-10 - 1.6.3-5etch2

evolution-data-server - 1.6.3-5etch2

libedataserver1.2-dev - 1.6.3-5etch2

Debian GNU/Linux 5:

ppc:

evolution-data-server-dev - 2.22.3-1.1+lenny1

libgdata-google1.2-dev - 2.22.3-1.1+lenny1

evolution-data-server-dbg - 2.22.3-1.1+lenny1

libgdata-google1.2-1 - 2.22.3-1.1+lenny1

libgdata1.2-1 - 2.22.3-1.1+lenny1

libedata-cal1.2-dev - 2.22.3-1.1+lenny1

libedataserver1.2-9 - 2.22.3-1.1+lenny1

libedata-cal1.2-6 - 2.22.3-1.1+lenny1

libexchange-storage1.2-3 - 2.22.3-1.1+lenny1

libexchange-storage1.2-dev - 2.22.3-1.1+lenny1

evolution-data-server - 2.22.3-1.1+lenny1

libedataserverui1.2-8 - 2.22.3-1.1+lenny1

libcamel1.2-11 - 2.22.3-1.1+lenny1

libedata-book1.2-dev - 2.22.3-1.1+lenny1

libedataserverui1.2-dev - 2.22.3-1.1+lenny1

libecal1.2-dev - 2.22.3-1.1+lenny1

libegroupwise1.2-13 - 2.22.3-1.1+lenny1

libcamel1.2-dev - 2.22.3-1.1+lenny1

libebook1.2-9 - 2.22.3-1.1+lenny1

libedataserver1.2-dev - 2.22.3-1.1+lenny1

libecal1.2-7 - 2.22.3-1.1+lenny1

libegroupwise1.2-dev - 2.22.3-1.1+lenny1

libedata-book1.2-2 - 2.22.3-1.1+lenny1

libebook1.2-dev - 2.22.3-1.1+lenny1

libgdata1.2-dev - 2.22.3-1.1+lenny1

s390x:

evolution-data-server-dbg - 2.22.3-1.1+lenn

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 87%

0.03409

Низкий

7.5 High

CVSS2

Связанные уязвимости

CVE-2009-0547

ubuntu

больше 16 лет назад

Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077.