Red Hat Security AdvisoryRHSA-2007:0353
evolution security update
Released 2007-05-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 evolution-1.4.5-20.el3, evolution-1.4.5-20.el3.i386, evolution-devel-1.4.5-20.el3 +1
- Red Hat Enterprise Linux AS version 3 evolution-1.4.5-20.el3, evolution-1.4.5-20.el3.i386, evolution-1.4.5-20.el3.ia64 +5
- Red Hat Enterprise Linux AS version 4 evolution-2.0.2-35.0.2.el4, evolution-2.0.2-35.0.2.el4.i386, evolution-2.0.2-35.0.2.el4.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 evolution-2.0.2-35.0.2.el4, evolution-2.0.2-35.0.2.el4.i386, evolution-devel-2.0.2-35.0.2.el4 +1
- Red Hat Enterprise Linux ES version 3 evolution-1.4.5-20.el3, evolution-1.4.5-20.el3.i386, evolution-1.4.5-20.el3.ia64 +3
- Red Hat Enterprise Linux ES version 4 evolution-2.0.2-35.0.2.el4, evolution-2.0.2-35.0.2.el4.i386, evolution-2.0.2-35.0.2.el4.ia64 +3
- Red Hat Enterprise Linux WS version 3 evolution-1.4.5-20.el3, evolution-1.4.5-20.el3.i386, evolution-1.4.5-20.el3.ia64 +3
- Red Hat Enterprise Linux WS version 4 evolution-2.0.2-35.0.2.el4, evolution-2.0.2-35.0.2.el4.i386, evolution-2.0.2-35.0.2.el4.ia64 +3
Fixes 1 record
Priority LOW 18
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02423 · Published 2007-04-16 · Fixed
