Test ID:	1.3.6.1.4.1.25623.1.0.55035
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-166-1 (evolution)
Summary:	Ubuntu USN-166-1 (evolution)
Description:	The remote host is missing an update to evolution announced via advisory USN-166-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) The following packages are affected: evolution Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this malicious task list data, it was possible for an attacker to execute arbitrary code with the privileges of the user running Evolution. In addition, this update fixes a Denial of Service vulnerability in the mail attachment parser. This could be exploited to crash Evolution by tricking an user into opening a malicious email with a specially crafted attachment file name. This does only affect the Ubuntu 4.10 version, the Evolution package shipped with Ubuntu 5.04 is not affected. (CVE-2005-0806) Solution: The problem can be corrected by upgrading the affected package to version 2.0.2-0ubuntu2.3 (for Ubuntu 4.10), or 2.2.1.1-0ubuntu4.2 (for Ubuntu 5.04). After performing a standard system upgrade you need to restart Evolution to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-166-1 http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035922.html Risk factor : Medium
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0806 http://www.mandriva.com/security/advisories?name=MDKSA-2005:059 http://www.redhat.com/support/errata/RHSA-2005-397.html http://www.ubuntulinux.org/support/documentation/usn/usn-166-1 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10532
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: