evolution-data-server: malicious server arbitrary code execution [LWN.net]

Package(s):

evolution-data-server

CVE #(s):

CVE-2007-3257

Created:

June 18, 2007

Updated:

November 7, 2007

Description:

From the GNOME bugzilla: "The "SEQUENCE" value in the GData of the IMAP code (camel-imap-folder.c) is converted from a string using strtol. This allows for negative values. The imap_rescan uses this value as an int. It checks for !seq and seq>summary.length. It doesn't check for seq < 0. Although seq is used as the index of an array."

Alerts:

Gentoo	200711-04	2007-11-06
Gentoo	200707-03	2007-07-02
SuSE	SUSE-SA:2007:042	2007-07-05
Debian	DSA-1325-1	2007-06-29
Fedora	FEDORA-2007-594	2007-06-27
Fedora	FEDORA-2007-595	2007-06-27
Mandriva	MDKSA-2007:136	2007-06-26
Red Hat	RHSA-2007:0510-01	2007-06-25
Red Hat	RHSA-2007:0509-01	2007-06-25
Debian	DSA-1321-1	2007-06-23
Ubuntu	USN-475-1	2007-06-21
Fedora	FEDORA-2007-0464	2007-06-16

(Log in to post comments)

evolution-data-server: malicious server arbitrary code execution

Posted Jun 21, 2007 20:59 UTC (Thu) by smithj (subscriber, #38034) [Link]

Foresight fixed this issue on 18 Jun (ref: http://lwn.net/Alerts/238903/)

rPath fixed this issue on 14 Jun (ref: http://lwn.net/Alerts/238440/)