Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Evolution is the GNOME collection of personal information management (PIM) tools.

A flaw was found in the way Evolution processed certain APOP authentication requests. A remote attacker could potentially acquire certain portions of a user's authentication credentials by sending certain responses when evolution-data-server attempted to authenticate against an APOP server. (CVE-2007-1558)

All users of Evolution should upgrade to these updated packages, which contain a backported patch which resolves this issue.

Balsa is not really listed in the list but it also lacked the verification of the server challenge.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of mutt fixes a vulnerability in the APOP implementation that allows an active attacker to guess three bytes of the password.
(CVE-2007-1558)

Gaetan Leurent showed a weakness in APOP authentication. An attacker posing as a trusted server could recover portions of the user's password via multiple authentication attempts. (CVE-2007-1558) 

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious email, an attacker could execute arbitrary code with the user's privileges. Please note that JavaScript is disabled by default for emails, and it is not recommended to enable it. (CVE-2007-2867, CVE-2007-2868).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote version of Mozilla Thunderbird suffers from various security issues, at least one of which may lead to execution of arbitrary code on the affected host subject to the user's privileges.

The installed version of SeaMonkey contains various security issues, one of which may lead to execution of arbitrary code on the affected host subject to the user's privileges.

ID	Name	Product	Family	Published	Updated	Severity
25268	RHEL 3 / 4 : evolution (RHSA-2007:0353)	Nessus	Red Hat Local Security Checks	5/20/2007	1/14/2021	low
27718	Fedora 7 : balsa-2.3.17-2.fc7 (2007-1447)	Nessus	Fedora Local Security Checks	11/6/2007	1/11/2021	low
29523	SuSE 10 Security Update : mutt (ZYPP Patch Number 3752)	Nessus	SuSE Local Security Checks	12/13/2007	1/14/2021	low
28069	Ubuntu 6.06 LTS / 6.10 / 7.04 : mozilla-thunderbird vulnerabilities (USN-469-1)	Nessus	Ubuntu Local Security Checks	11/10/2007	1/19/2021	high
4072	Mozilla Thunderbird < 1.5.0.12 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	SMTP Clients	5/31/2007	3/6/2019	high
4073	SeaMonkey < 1.0.9 / 1.1.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	5/31/2007	3/6/2019	high
801309	Mozilla SeaMonkey < 1.0.9 / 1.1.2 Multiple Vulnerabilities	Log Correlation Engine	Web Clients			high
801361	Mozilla Thunderbird < 1.5.0.12 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients			high

Detections

Analytics

Plugins Search

low

low

low

high

high

high

high

high