7.5 - CVE-2009-0587

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2009-0587	First vendor Publication	2009-03-14
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0587

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11385

Oval ID:	oval:org.mitre.oval:def:11385
Title:	Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.
Description:	Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0587	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section evolution is earlier than 0:1.4.5-25.el3 AND evolution-devel is earlier than 0:1.4.5-25.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section evolution28-evolution-data-server-devel is earlier than 0:1.8.0-37.el4_7.2 AND evolution-data-server-devel is earlier than 0:1.0.2-14.el4_7.1 AND evolution-data-server is earlier than 0:1.0.2-14.el4_7.1 AND evolution is earlier than 0:2.0.2-41.el4_7.2 AND evolution28-evolution-data-server is earlier than 0:1.8.0-37.el4_7.2 AND evolution-devel is earlier than 0:2.0.2-41.el4_7.2 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3 AND evolution-data-server is earlier than 0:1.12.3-10.el5_3.3 AND evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3

Definition Id: oval:org.mitre.oval:def:13169

Oval ID:	oval:org.mitre.oval:def:13169
Title:	USN-733-1 -- evolution-data-server vulnerability
Description:	It was discovered that the Base64 encoding functions in evolution-data-server did not properly handle large strings. If a user were tricked into opening a specially crafted image file, or tricked into connecting to a malicious server, an attacker could possibly execute arbitrary code with user privileges.
Family:	unix	Class:	patch
Reference(s):	USN-733-1 CVE-2009-0587	Version:	5
Platform(s):	Ubuntu 7.10 Ubuntu 6.06	Product(s):	evolution-data-server
Definition Synopsis:
Release section Ubuntu 7.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND evolution-data-server-common DPKG is earlier than 1.12.1-0ubuntu2.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libedataserverui1.2-8 DPKG is earlier than 1.12.1-0ubuntu2.1 AND libedata-book1.2-2 DPKG is earlier than 1.12.1-0ubuntu2.1 AND libecal1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND evolution-data-server-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND evolution-data-server DPKG is earlier than 1.12.1-0ubuntu2.1 AND libegroupwise1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND libedata-book1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND libedataserverui1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND libebook1.2-9 DPKG is earlier than 1.12.1-0ubuntu2.1 AND libedata-cal1.2-6 DPKG is earlier than 1.12.1-0ubuntu2.1 AND evolution-data-server-dbg DPKG is earlier than 1.12.1-0ubuntu2.1 AND libebook1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND libcamel1.2-10 DPKG is earlier than 1.12.1-0ubuntu2.1 AND libedata-cal1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND libecal1.2-7 DPKG is earlier than 1.12.1-0ubuntu2.1 AND libexchange-storage1.2-3 DPKG is earlier than 1.12.1-0ubuntu2.1 AND libexchange-storage1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND libcamel1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 AND libegroupwise1.2-13 DPKG is earlier than 1.12.1-0ubuntu2.1 AND libedataserver1.2-9 DPKG is earlier than 1.12.1-0ubuntu2.1 AND libedataserver1.2-dev DPKG is earlier than 1.12.1-0ubuntu2.1 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libcamel1.2-8 DPKG is earlier than 1.6.1-0ubuntu7.2 AND libebook1.2-5 DPKG is earlier than 1.6.1-0ubuntu7.2 AND libedata-book1.2-2 DPKG is earlier than 1.6.1-0ubuntu7.2 AND libecal1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND evolution-data-server-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND evolution-data-server DPKG is earlier than 1.6.1-0ubuntu7.2 AND libegroupwise1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND libedata-book1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND libedata-cal1.2-1 DPKG is earlier than 1.6.1-0ubuntu7.2 AND libedataserverui1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND libegroupwise1.2-9 DPKG is earlier than 1.6.1-0ubuntu7.2 AND evolution-data-server-dbg DPKG is earlier than 1.6.1-0ubuntu7.2 AND libcamel1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND libedata-cal1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND libedataserverui1.2-6 DPKG is earlier than 1.6.1-0ubuntu7.2 AND libexchange-storage1.2-1 DPKG is earlier than 1.6.1-0ubuntu7.2 AND libedataserver1.2-7 DPKG is earlier than 1.6.1-0ubuntu7.2 AND libebook1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND libexchange-storage1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND libedataserver1.2-dev DPKG is earlier than 1.6.1-0ubuntu7.2 AND libecal1.2-3 DPKG is earlier than 1.6.1-0ubuntu7.2

Definition Id: oval:org.mitre.oval:def:21826

Oval ID:	oval:org.mitre.oval:def:21826
Title:	ELSA-2009:0354: evolution-data-server security update (Moderate)
Description:	Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:0354-01 CVE-2009-0547 CVE-2009-0582 CVE-2009-0587	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	evolution28-evolution-data-server evolution-data-server
Definition Synopsis:
Oracle Linux 5.x rpm test evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3 AND evolution-data-server is earlier than 0:1.12.3-10.el5_3.3 AND evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3

Definition Id: oval:org.mitre.oval:def:28741

Oval ID:	oval:org.mitre.oval:def:28741
Title:	RHSA-2009:0354 -- evolution-data-server security update (Moderate)
Description:	Updated evolution-data-server and evolution28-evolution-data-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution Data Server provides a unified back-end for applications which interact with contacts, task, and calendar information. Evolution Data Server was originally developed as a back-end for Evolution, but is now used by multiple other applications.
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:0354 CVE-2009-0547 CVE-2009-0582 CVE-2009-0587	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 4	Product(s):	evolution28-evolution-data-server evolution-data-server
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3 AND evolution-data-server is earlier than 0:1.12.3-10.el5_3.3 AND evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3 AND Red Hat Enterprise Linux 4 release section The operating system installed on the system is Red Hat Enterprise Linux 4 Packages match section evolution28-evolution-data-server is earlier than 0:1.8.0-37.el4_7.2 AND evolution28-evolution-data-server-devel is earlier than 0:1.8.0-37.el4_7.2

OpenVAS Exploits

Date	Description
2011-08-09	Name : CentOS Update for evolution28-evolution-data-server CESA-2009:0354 centos4 i386 File : nvt/gb_CESA-2009_0354_evolution28-evolution-data-server_centos4_i386.nasl
2011-08-09	Name : CentOS Update for evolution CESA-2009:0355 centos4 i386 File : nvt/gb_CESA-2009_0355_evolution_centos4_i386.nasl
2011-08-09	Name : CentOS Update for evolution CESA-2009:0358 centos3 i386 File : nvt/gb_CESA-2009_0358_evolution_centos3_i386.nasl
2009-06-09	Name : Debian Security Advisory DSA 1813-1 (evolution-data-server) File : nvt/deb_1813_1.nasl
2009-05-25	Name : CentOS Security Advisory CESA-2009:0354 (evolution-data-server) File : nvt/ovcesa2009_0354.nasl
2009-05-25	Name : CentOS Security Advisory CESA-2009:0355 (evolution-data-server) File : nvt/ovcesa2009_0355.nasl
2009-03-31	Name : Mandrake Security Advisory MDVSA-2009:078 (evolution-data-server) File : nvt/mdksa_2009_078.nasl
2009-03-20	Name : RedHat Security Advisory RHSA-2009:0354 File : nvt/RHSA_2009_0354.nasl
2009-03-20	Name : RedHat Security Advisory RHSA-2009:0355 File : nvt/RHSA_2009_0355.nasl
2009-03-20	Name : RedHat Security Advisory RHSA-2009:0358 File : nvt/RHSA_2009_0358.nasl
2009-03-20	Name : CentOS Security Advisory CESA-2009:0358 (evolution) File : nvt/ovcesa2009_0358.nasl
2009-03-20	Name : Ubuntu USN-733-1 (evolution-data-server) File : nvt/ubuntu_733_1.nasl
2009-03-20	Name : Ubuntu USN-734-1 (ffmpeg-debian) File : nvt/ubuntu_734_1.nasl
2009-03-18	Name : Evolution Data Server Multiple Integer Overflow Vulnerabilities File : nvt/gb_evolution_data_server_mult_int_overflow_vuln.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
52703	Evolution Data Server libcamel camel/camel-mime-utils.c Base64 String Handlin...
52702	Evolution Data Server evc addressbook/libebook/e-vcard.c Base64 String Handli...

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0354.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0355.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0358.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090316_evolution_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090316_evolution_data_server_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090316_evolution_and_evolution_data_server_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_evolution-data-server-7029.nasl - Type : ACT_GATHER_INFO
2010-03-11	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_evolution-data-server-100208.nasl - Type : ACT_GATHER_INFO
2009-06-09	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1813.nasl - Type : ACT_GATHER_INFO
2009-05-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0355.nasl - Type : ACT_GATHER_INFO
2009-05-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0354.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-733-1.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-078.nasl - Type : ACT_GATHER_INFO
2009-03-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0358.nasl - Type : ACT_GATHER_INFO
2009-03-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0355.nasl - Type : ACT_GATHER_INFO
2009-03-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0354.nasl - Type : ACT_GATHER_INFO
2009-03-17	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0358.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
http://ocert.org/patches/2008-015/camel-CVE-2009-0587.diff
http://ocert.org/patches/2008-015/evc-CVE-2009-0587.diff
http://openwall.com/lists/oss-security/2009/03/12/2
http://osvdb.org/52702
http://osvdb.org/52703
http://secunia.com/advisories/34338
http://secunia.com/advisories/34339
http://secunia.com/advisories/34348
http://secunia.com/advisories/34351
http://secunia.com/advisories/35357
http://www.debian.org/security/2009/dsa-1813
http://www.mandriva.com/security/advisories?name=MDVSA-2009:078
http://www.ocert.org/advisories/ocert-2008-015.html
http://www.redhat.com/support/errata/RHSA-2009-0354.html
http://www.redhat.com/support/errata/RHSA-2009-0355.html
http://www.redhat.com/support/errata/RHSA-2009-0358.html
http://www.securityfocus.com/archive/1/501712/100/0/threaded
http://www.securityfocus.com/bid/34100
http://www.ubuntu.com/usn/USN-733-1
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 23:11:54	Multiple Updates
2024-11-28 12:18:18	Multiple Updates
2023-02-13 09:29:20	Multiple Updates
2023-02-02 21:28:57	Multiple Updates
2021-04-22 01:09:29	Multiple Updates
2020-05-23 01:40:02	Multiple Updates
2020-05-23 00:23:22	Multiple Updates
2018-10-11 00:19:30	Multiple Updates
2017-09-29 09:24:04	Multiple Updates
2016-06-28 17:35:41	Multiple Updates
2016-04-26 18:38:30	Multiple Updates
2014-02-17 10:48:52	Multiple Updates
2013-05-10 23:44:28	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	4
Sources(s)	21
osvdb(s)	2
Openvas Exploit(s)	14
Nessus® Exploit(s)	17

	Related
7.5	USN-733-1
7.5	RHSA-2009:0358
7.5	RHSA-2009:0355
7.5	RHSA-2009:0354
7.5	MDVSA-2009:078
7.5	DSA-1813
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)