NVD

Id
47878  
Name
CVE-2009-0547  
Description
Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-02-12  
Modified Date
2010-08-21  
Seq
2009-0547  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239859 47878 CVE-2009-0547 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479  View
239860 47878 CVE-2009-0547 http://bugzilla.gnome.org/show_bug.cgi?id=564465  View
239861 47878 CVE-2009-0547 SUSE-SR:2010:006  View
239862 47878 CVE-2009-0547 SUSE-SR:2010:011  View
239863 47878 CVE-2009-0547 SUSE-SR:2010:012  View
239864 47878 CVE-2009-0547 [oss-security] 20090210 CVE Request -- evolution  View
239865 47878 CVE-2009-0547 oval:org.mitre.oval:def:9619  View
239866 47878 CVE-2009-0547 DSA-1813  View
239867 47878 CVE-2009-0547 MDVSA-2009:078  View
239868 47878 CVE-2009-0547 RHSA-2009:0354  View
239869 47878 CVE-2009-0547 RHSA-2009:0355  View
239870 47878 CVE-2009-0547 33720  View
239871 47878 CVE-2009-0547 ADV-2010-1107  View
239872 47878 CVE-2009-0547 https://bugzilla.redhat.com/show_bug.cgi?id=484925  View
239873 47878 CVE-2009-0547 FEDORA-2009-2784  View
239874 47878 CVE-2009-0547 FEDORA-2009-2792  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40487 JVNDB-2009-001493 Evolution における署名偽装の脆弱性 Evolution には、ユーザに表示される e-mail 本文のコピーではなく、signed-data 型の BLOB 内の e-mail 本文のコピーに対して S/MIME 署名を確認するため、署名偽装の脆弱性が存在します。 CVE-2009-0547 37978 CVE-2009-0547 47878 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001493.html 2009-02-12 2009-06-30 View