cbcvebase.
CVE-2009-1631
published 2009-05-14

CVE-2009-1631: The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under…

low2.1CVSS 3.1
AVLACLAuNCPINAN
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.

Affected

24 ranges
VendorProductVersion rangeFixed in
debianevolution< evolution 2.29.90-1 (bookworm)evolution 2.29.90-1 (bookworm)
gnomeevolution<= 2.26.1
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution
gnomeevolution>= 0 < 2.29.90-12.29.90-1
gnomeevolution>= 0 < 2.29.90-12.29.90-1
gnomeevolution>= 0 < 2.29.90-12.29.90-1
gnomeevolution>= 0 < 2.29.90-12.29.90-1

CVSS provenance

nvd2.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv2.1LOW