SB2018072632 - Ubuntu update for evolution-data-server

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018072632

SB2018072632 - Ubuntu update for evolution-data-server

Published: July 26, 2018 Updated: October 30, 2026

Security Bulletin ID SB2018072632
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Man-in-the-middle attack (CVE-ID: CVE-2016-10727)

CWE-ID: CWE-300 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

CVSSv4: 2.3 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an adjacent attacker to conduct man-in-the-middle attack..

The vulnerability exists in the IMAPx component of GNOME Evolution Data Server due to the IMAPx component, as defined in the camel/providers/imapx/camel-imapx-server.c source code file of the affected software, does not support STARTTLS. An adjacent attacker can sniff network traffic between the two systems and gain access to sensitive information, such as the user's password, to conduct further attacks.


Remediation

Install update from vendor's website.

References