2.1

CVE-2009-1631

Exploit
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Evolution Version <= 2.26.1
Gnome ≫ Evolution Version 1.0.8
Gnome ≫ Evolution Version 1.2
Gnome ≫ Evolution Version 1.2.1
Gnome ≫ Evolution Version 1.2.2
Gnome ≫ Evolution Version 1.2.3
Gnome ≫ Evolution Version 1.2.4
Gnome ≫ Evolution Version 1.4
Gnome ≫ Evolution Version 1.4.3
Gnome ≫ Evolution Version 1.4.4
Gnome ≫ Evolution Version 1.4.5
Gnome ≫ Evolution Version 1.4.6
Gnome ≫ Evolution Version 2.0.0
Gnome ≫ Evolution Version 2.0.1
Gnome ≫ Evolution Version 2.0.2
Gnome ≫ Evolution Version 2.4
Gnome ≫ Evolution Version 2.6
Gnome ≫ Evolution Version 2.12
Gnome ≫ Evolution Version 2.24
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.44% 0.354
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409
Exploit
http://bugzilla.gnome.org/show_bug.cgi?id=581604
http://www.openwall.com/lists/oss-security/2009/05/12/6
http://www.securityfocus.com/bid/34921
https://bugzilla.redhat.com/show_bug.cgi?id=498648