Red Hat Security AdvisoryRHSA-2007:0344
evolution-data-server security update
Released 2007-05-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) evolution-data-server-1.8.0-15.0.3.el5, evolution-data-server-1.8.0-15.0.3.el5.i386, evolution-data-server-1.8.0-15.0.3.el5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) evolution-data-server-1.8.0-15.0.3.el5, evolution-data-server-1.8.0-15.0.3.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) evolution-data-server-1.8.0-15.0.3.el5, evolution-data-server-devel-1.8.0-15.0.3.el5, evolution-data-server-devel-1.8.0-15.0.3.el5.i386
Fixes 1 record
Priority LOW 18
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02423 · Published 2007-04-16 · Fixed
