Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: 202304-12 Critical: Evolution Camel-Lock-Helper Memory Corruption

gentoo
Calendar Grey January 24, 2005
Scroller Gentoo
Gentoo GLSA 200602-28 outlines a buffer overflow in the file-manager utility, potentially leading to unauthorized access. Immediate patching is advised.
An overflow in the camel-lock-helper application can be exploited by an attacker to execute arbitrary code with elevated privileges.

Summary

Gentoo Linux Security Advisory GLSA 200501-35 https://security.gentoo.org/ Severity: High Title: Evolution: Integer overflow in camel-lock-helper Date: January 24, 2005 Bugs: #79183 ID: 200501-35

Synopsis ======= An overflow in the camel-lock-helper application can be exploited by an attacker to execute arbitrary code with elevated privileges.
Background ========= Evolution is a GNOME groupware application similar to Microsoft Outlook.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 mail-client/evolution <= 2.0.2 >= 2.0.2-r1
========== Max Vozeler discovered an integer overflow in the camel-lock-helper application, which is installed as setgid mail by defa...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory high severity gentoo arbitrary code execution integer overflow evolution camel-lock-helper

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo arbitrary code execution integer overflow evolution camel-lock-helper

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround