CVE-2016-10727
published 2018-07-20CVE-2016-10727: camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a…
PriorityP354critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
2.89%
85.3th percentile
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | evolution-data-server | < evolution-data-server 3.22.0-2 (bookworm) | evolution-data-server 3.22.0-2 (bookworm) |
| gnome | evolution | < 3.21.2 | 3.21.2 |
| gnome | evolution-data-server | >= 0 < 3.22.0-2 | 3.22.0-2 |
| gnome | evolution-data-server | >= 0 < 3.22.0-2 | 3.22.0-2 |
| gnome | evolution-data-server | >= 0 < 3.22.0-2 | 3.22.0-2 |
| gnome | evolution-data-server | >= 0 < 3.22.0-2 | 3.22.0-2 |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Evolution Data Server vulnerability
vendor_ubuntu·2018-07-26
CVE-2016-10727 Evolution Data Server vulnerability
Title: Evolution Data Server vulnerability
Summary: Evolution Data Server could be made to expose sensitive information over the
network.
Jon Kristensen discovered that Evolution Data Server would automatically
downgrade a connection to an IMAP server if the IMAP server did not support
SSL. This would result in the user's password being unexpectedly sent in clear
text, even though the user had requested to use SSL.
Instructions: After a standard system update you need to restart Evolution to make
all the necessary changes.
Red Hat
evolution-data-server: IMAPx Component Information Disclosure
vendor_redhat·2016-05-10·CVSS 9.8
CVE-2016-10727 [CRITICAL] CWE-393 evolution-data-server: IMAPx Component Information Disclosure
evolution-data-server: IMAPx Component Information Disclosure
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly.
Statement: This issue did not affect the versions of evolution-data-server as shipped with Red Hat Enterprise Linux 5 and 6 as they did not include the vulnerable code.
Package: evolution-data-server (Red Hat Enterprise Linux 5) - Not affected
Package: evolution-data-server (Red Hat Enterprise
Debian
CVE-2016-10727: evolution-data-server - camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolu...
vendor_debian·2016·CVSS 9.8
CVE-2016-10727 [CRITICAL] CVE-2016-10727: evolution-data-server - camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolu...
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly.
Scope: local
bookworm: resolved (fixed in 3.22.0-2)
bullseye: resolved (fixed in 3.22.0-2)
forky: resolved (fixed in 3.22.0-2)
sid: resolved (fixed in 3.22.0-2)
trixie: resolved (fixed in 3.22.0-2)
GHSA
GHSA-7xwg-339m-2rw9: camel/providers/imapx/camel-imapx-server
ghsa_unreviewed·2022-05-14
CVE-2016-10727 [CRITICAL] CWE-200 GHSA-7xwg-339m-2rw9: camel/providers/imapx/camel-imapx-server
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly.
OSV
CVE-2016-10727: camel/providers/imapx/camel-imapx-server
osv·2018-07-20·CVSS 9.8
CVE-2016-10727 [CRITICAL] CVE-2016-10727: camel/providers/imapx/camel-imapx-server
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly.
No detection rules found.
No public exploits indexed.
https://bugzilla.redhat.com/show_bug.cgi?id=1334842https://github.com/GNOME/evolution-data-server/releases/tag/EVOLUTION_DATA_SERVER_3_21_2https://gitlab.gnome.org/GNOME/evolution-data-server/blob/master/NEWS#L1022https://gitlab.gnome.org/GNOME/evolution-data-server/commit/f26a6f67https://usn.ubuntu.com/3724-1/https://bugzilla.redhat.com/show_bug.cgi?id=1334842https://github.com/GNOME/evolution-data-server/releases/tag/EVOLUTION_DATA_SERVER_3_21_2https://gitlab.gnome.org/GNOME/evolution-data-server/blob/master/NEWS#L1022https://gitlab.gnome.org/GNOME/evolution-data-server/commit/f26a6f67https://usn.ubuntu.com/3724-1/
2018-07-20
Published