French Security Incident Response Team

FrSIRT   

      

   français French  anglais English

 
Vulnerability Notification Service
FrSIRT Private Exploit & PoC Codes Service
FrSIRT Partner Program
14-Day Free Trial
Contact FrSIRT Sales Dept.
 

Security Advisories
Linux Security Advisories
Virus and Threats Advisories
Latest Security News
Latest Zero Day Threats
Security Vulnerabilities and Advisories Search Engine
 

Report a security incident
Report a new vulnerability
Security Mailinglist
 

Our Company
FrSIRT in the News
Advertise on FrSIRT.COM
Security Researchers and Exploit Writers Jobs
Contact Us

Mandriva Security Update Fixes Evolution Format String Vulnerability


Title : Mandriva Security Update Fixes Evolution Format String Vulnerability
Advisory ID : FrSIRT/ADV-2008-0791
CVE ID : CVE-2008-0072
Rated as : Critical 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2008-03-07

Advisory Details

 
  Description
  Affected Products
  Solution
  References
Technical Description    Receive FrSIRT alerts in a Text format  Receive FrSIRT alerts in a PDF format  Receive FrSIRT alerts in an XML format  Receive FrSIRT notifications by SMS 

A vulnerability has been identified in Mandriva, which could be exploited by remote attackers to cause a denial of service or execute arbitrary code [...]

Solution

Upgrade the affected packages :

Mandriva Linux 2007.1:
4e8e24994ce1f37d7fa2b40b93cb7767 2007.1/i586/evolution-2.10.2-2.2mdv2007.1.i586.rpm
7d2a80c1c7f506f064d2e05895b67b0d 2007.1/i586/evolution-devel-2.10.2-2.2mdv2007.1.i586.rpm
0a80f0dd31179d99747c4c851e2ed8a9 2007.1/i586/evolution-mono-2.10.2-2.2mdv2007.1.i586.rpm
4bd7556907014b0e047c30ce43484caf 2007.1/i586/evolution-pilot-2.10.2-2.2mdv2007.1.i586.rpm
826717f3fea97f934eb6a596f67edd96 2007.1/SRPMS/evolution-2.10.2-2.2mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
0951f21569c57a2c3975c5df7f5f2074 2007.1/x86_64/evolution-2.10.2-2.2mdv2007.1.x86_64.rpm
8b0cef17cde0851a5fe626881b71c09a 2007.1/x86_64/evolution-devel-2.10.2-2.2mdv2007.1.x86_64.rpm
43a889af38f11b34dc503f51de9f4921 2007.1/x86_64/evolution-mono-2.10.2-2.2mdv2007.1.x86_64.rpm
7586926d4809c66fc8bbd656be2a64fc 2007.1/x86_64/evolution-pilot-2.10.2-2.2mdv2007.1.x86_64.rpm
826717f3fea97f934eb6a596f67edd96 2007.1/SRPMS/evolution-2.10.2-2.2mdv2007.1.src.rpm

Mandriva Linux 2008.0:
848621169e649c76a118adc78bbeb437 2008.0/i586/evolution-2.12.3-1.2mdv2008.0.i586.rpm
0034c11598d908c5a94cb637b255a2c9 2008.0/i586/evolution-devel-2.12.3-1.2mdv2008.0.i586.rpm
526f6dff8ed0501d4d685caa7dbd0a11 2008.0/i586/evolution-mono-2.12.3-1.2mdv2008.0.i586.rpm
ae736c07e20a46a99b03c81a7047b440 2008.0/i586/evolution-pilot-2.12.3-1.2mdv2008.0.i586.rpm
bf7431bd51a057d8ef5a80d541ad8de1 2008.0/SRPMS/evolution-2.12.3-1.2mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
d3c4fd1d66dc8dec3a318cab203fc393 2008.0/x86_64/evolution-2.12.3-1.2mdv2008.0.x86_64.rpm
5130831a0fd1c5d6a07f12fc8c5f68ff 2008.0/x86_64/evolution-devel-2.12.3-1.2mdv2008.0.x86_64.rpm
96c34cd8fe5f4981e788f72e4038812a 2008.0/x86_64/evolution-mono-2.12.3-1.2mdv2008.0.x86_64.rpm
126ff5b8d697970652cfa365926556df 2008.0/x86_64/evolution-pilot-2.12.3-1.2mdv2008.0.x86_64.rpm
bf7431bd51a057d8ef5a80d541ad8de1 2008.0/SRPMS/evolution-2.12.3-1.2mdv2008.0.src.rpm

ChangeLog

2008-03-07 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.


 
 

Search

      

Mailinglist

    
 

Cisco IOS/CatOS VLAN Trunking Protocol DoS Vulnerability

Cisco PIX and ASA Security Bypass and Denial of Service

Cisco Unity Security Bypass and Denial of Service

Cisco UCM SIP Remote Denial of Service

Cisco IOS Denial of Service and Security Bypass Vulnerabilities

Cisco PIX and ASA Information Disclosure and DoS Vulnerabilities

Cisco Secure ACS EAP Remote Denial Of Service Vulnerability

Microsoft XML Core Services Multiple Remote Vulnerabilities (MS08-069)

Microsoft Windows SMB Credential Reflection Vulnerability (MS08-068)

Microsoft Windows Server Service Vulnerability (MS08-067)

Microsoft Windows "afd.sys" Privilege Escalation Vulnerability (MS08-066)

Microsoft Windows MSMQ Code Execution Vulnerability (MS08-065)

Microsoft Windows VADs Privilege Escalation Vulnerability (MS08-064)

Microsoft Windows SMB Code Execution Vulnerability (MS08-063)

IBM AIX Multiple Command Local Privilege Escalation Vulnerabilities

IBM AIX Sendmail Header Lines Denial of Service Vulnerability

IBM Metrica Multiple Parameter Cross Site Scripting Vulnerabilities

IBM Lotus Quickr Unspecified Cross Site Scripting Vulnerabilities

IBM Hardware Management Console Denial of Service Vulnerability

IBM Tivoli Storage Manager Client Buffer Overflow Vulnerability

IBM DB2 Denial of Service and Information Disclosure Vulnerabilities

Copyright 2003-2008 © FrSIRT.COM - Privacy Policy