Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: 200508-12 Normal: Evolution Format String Risk and Fix

gentoo
Calendar Grey August 26, 2005
Scroller Gentoo
Gentoo Linux users should note vulnerabilities in the Evolution email client that allow remote code execution, requiring prompt updates and careful email handling
Evolution is vulnerable to format string vulnerabilities which may result in remote execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200508-12 https://security.gentoo.org/ Severity: Normal Title: Evolution: Format string vulnerabilities Date: August 23, 2005 Bugs: #102051 ID: 200508-12

Synopsis ======= Evolution is vulnerable to format string vulnerabilities which may result in remote execution of arbitrary code.
Background ========= Evolution is a GNOME groupware application.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 mail-client/evolution < 2.2.3-r3 >= 2.2.3-r3
========== Ulf Harnhammar discovered that Evolution is vulnerable to format string bugs when viewing attached vCards and when displaying contact information from remote LDAP servers or tas...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo format string remote execution evolution

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo format string remote execution evolution

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround