• info
• discussion
• exploit
• solution
• references

GNOME Evolution Multiple Format String Vulnerabilities

Solution:

Please see the referenced vendor advisories for information on updates.


GNOME Evolution 1.0.5

• Debian evolution_1.0.5-1woody3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/evolution_1.0 .5-1woody3_alpha.deb


• Debian evolution_1.0.5-1woody3_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/evolution_1.0 .5-1woody3_arm.deb


• Debian evolution_1.0.5-1woody3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/evolution_1.0 .5-1woody3_i386.deb


• Debian evolution_1.0.5-1woody3_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/evolution_1.0 .5-1woody3_ia64.deb


• Debian evolution_1.0.5-1woody3_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/evolution_1.0 .5-1woody3_m68k.deb


• Debian evolution_1.0.5-1woody3_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/evolution_1.0 .5-1woody3_powerpc.deb


• Debian evolution_1.0.5-1woody3_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/evolution_1.0 .5-1woody3_s390.deb


• Debian evolution_1.0.5-1woody3_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/evolution_1.0 .5-1woody3_sparc.deb


• Debian libcamel-dev_1.0.5-1woody3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel-dev_ 1.0.5-1woody3_alpha.deb


• Debian libcamel-dev_1.0.5-1woody3_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel-dev_ 1.0.5-1woody3_arm.deb


• Debian libcamel-dev_1.0.5-1woody3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel-dev_ 1.0.5-1woody3_i386.deb


• Debian libcamel-dev_1.0.5-1woody3_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel-dev_ 1.0.5-1woody3_ia64.deb


• Debian libcamel-dev_1.0.5-1woody3_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel-dev_ 1.0.5-1woody3_m68k.deb


• Debian libcamel-dev_1.0.5-1woody3_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel-dev_ 1.0.5-1woody3_powerpc.deb


• Debian libcamel-dev_1.0.5-1woody3_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel-dev_ 1.0.5-1woody3_s390.deb


• Debian libcamel-dev_1.0.5-1woody3_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel-dev_ 1.0.5-1woody3_sparc.deb


• Debian libcamel0_1.0.5-1woody3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel0_1.0 .5-1woody3_alpha.deb


• Debian libcamel0_1.0.5-1woody3_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel0_1.0 .5-1woody3_arm.deb


• Debian libcamel0_1.0.5-1woody3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel0_1.0 .5-1woody3_i386.deb


• Debian libcamel0_1.0.5-1woody3_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel0_1.0 .5-1woody3_ia64.deb


• Debian libcamel0_1.0.5-1woody3_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel0_1.0 .5-1woody3_m68k.deb


• Debian libcamel0_1.0.5-1woody3_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel0_1.0 .5-1woody3_powerpc.deb


• Debian libcamel0_1.0.5-1woody3_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel0_1.0 .5-1woody3_s390.deb


• Debian libcamel0_1.0.5-1woody3_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/e/evolution/libcamel0_1.0 .5-1woody3_sparc.deb

GNOME Evolution 1.5

• Mandriva evolution-1.4.6-5.2.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-1.4.6-5.2.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-devel-1.4.6-5.2.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-devel-1.4.6-5.2.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-pilot-1.4.6-5.2.C30mdk.i586.rpm
  Corporate 3.0
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-pilot-1.4.6-5.2.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3

GNOME Evolution 2.0

• Mandriva evolution-2.0.3-1.4.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-2.0.3-1.4.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-2.0.4-3.1.102mdk.i586.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-2.0.4-3.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-devel-2.0.3-1.4.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-devel-2.0.3-1.4.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-devel-2.0.4-3.1.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-devel-2.0.4-3.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-pilot-2.0.3-1.4.101mdk.i586.rpm
  Mandrakelinux 10.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-pilot-2.0.3-1.4.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-pilot-2.0.4-3.1.102mdk.i586.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva evolution-pilot-2.0.4-3.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2
  http://www1.mandrivalinux.com/en/ftp.php3


• Ubuntu evolution-dev_2.0.2-0ubuntu2.3_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.0.2-0ubuntu2.3_amd64.deb


• Ubuntu evolution-dev_2.0.2-0ubuntu2.3_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.0.2-0ubuntu2.3_i386.deb


• Ubuntu evolution-dev_2.0.2-0ubuntu2.3_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.0.2-0ubuntu2.3_powerpc.deb


• Ubuntu evolution_2.0.2-0ubuntu2.3_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.0. 2-0ubuntu2.3_amd64.deb


• Ubuntu evolution_2.0.2-0ubuntu2.3_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.0. 2-0ubuntu2.3_i386.deb


• Ubuntu evolution_2.0.2-0ubuntu2.3_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.0. 2-0ubuntu2.3_powerpc.deb


• Ubuntu evolution1.5-dev_2.0.2-0ubuntu2.3_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution1.5-d ev_2.0.2-0ubuntu2.3_all.deb

GNOME Evolution 2.0.1

• S.u.S.E. evolution-2.0.1-6.8.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/evolution-2.0.1-6 .8.i586.rpm


• S.u.S.E. evolution-2.0.1-6.8.src.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/evolution-2.0.1-6. 8.src.rpm


• S.u.S.E. evolution-2.0.1-6.8.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/evolution-2.0.1 -6.8.x86_64.rpm


• S.u.S.E. evolution-2.2.1-7.4.src.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/evolution-2.2.1-7. 4.src.rpm


• S.u.S.E. evolution-2.2.1-7.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/evolution-2.2.1 -7.4.x86_64.rpm


• S.u.S.E. evolution-data-server-1.2.1-7.3.src.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/evolution-data-ser ver-1.2.1-7.3.src.rpm


• S.u.S.E. evolution-data-server-1.2.1-7.3.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/evolution-data- server-1.2.1-7.3.x86_64.rpm


• S.u.S.E. evolution-data-server-devel-1.2.1-7.3.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/evolution-data- server-devel-1.2.1-7.3.x86_64.rpm


• S.u.S.E. evolution-devel-2.0.1-6.8.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/evolution-devel-2 .0.1-6.8.i586.rpm


• S.u.S.E. evolution-devel-2.0.1-6.8.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/evolution-devel -2.0.1-6.8.x86_64.rpm


• S.u.S.E. evolution-devel-2.2.1-7.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/evolution-devel -2.2.1-7.4.x86_64.rpm


• S.u.S.E. evolution-pilot-2.0.1-6.8.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/evolution-pilot-2 .0.1-6.8.i586.rpm


• S.u.S.E. evolution-pilot-2.0.1-6.8.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/evolution-pilot -2.0.1-6.8.x86_64.rpm


• S.u.S.E. evolution-pilot-2.2.1-7.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/evolution-pilot -2.2.1-7.4.x86_64.rpm

GNOME Evolution 2.0.4

• Debian evolution-dev_2.0.4-2sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_alpha.deb


• Debian evolution-dev_2.0.4-2sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_amd64.deb


• Debian evolution-dev_2.0.4-2sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_arm.deb


• Debian evolution-dev_2.0.4-2sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_hppa.deb


• Debian evolution-dev_2.0.4-2sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_i386.deb


• Debian evolution-dev_2.0.4-2sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_ia64.deb


• Debian evolution-dev_2.0.4-2sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_m68k.deb


• Debian evolution-dev_2.0.4-2sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_mips.deb


• Debian evolution-dev_2.0.4-2sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_mipsel.deb


• Debian evolution-dev_2.0.4-2sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_powerpc.deb


• Debian evolution-dev_2.0.4-2sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_s390.deb


• Debian evolution-dev_2.0.4-2sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution-dev _2.0.4-2sarge1_sparc.deb


• Debian evolution_2.0.4-2sarge1_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_alpha.deb


• Debian evolution_2.0.4-2sarge1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_amd64.deb


• Debian evolution_2.0.4-2sarge1_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_arm.deb


• Debian evolution_2.0.4-2sarge1_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_hppa.deb


• Debian evolution_2.0.4-2sarge1_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_i386.deb


• Debian evolution_2.0.4-2sarge1_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_ia64.deb


• Debian evolution_2.0.4-2sarge1_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_m68k.deb


• Debian evolution_2.0.4-2sarge1_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_mips.deb


• Debian evolution_2.0.4-2sarge1_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_mipsel.deb


• Debian evolution_2.0.4-2sarge1_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_powerpc.deb


• Debian evolution_2.0.4-2sarge1_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_s390.deb


• Debian evolution_2.0.4-2sarge1_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/e/evolution/evolution_2.0 .4-2sarge1_sparc.deb

GNOME Evolution 2.2

• Ubuntu evolution-dev_2.2.1.1-0ubuntu4.2_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.2.1.1-0ubuntu4.2_amd64.deb


• Ubuntu evolution-dev_2.2.1.1-0ubuntu4.2_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.2.1.1-0ubuntu4.2_i386.deb


• Ubuntu evolution-dev_2.2.1.1-0ubuntu4.2_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.2.1.1-0ubuntu4.2_powerpc.deb


• Ubuntu evolution_2.2.1.1-0ubuntu4.2_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.2. 1.1-0ubuntu4.2_amd64.deb


• Ubuntu evolution_2.2.1.1-0ubuntu4.2_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.2. 1.1-0ubuntu4.2_i386.deb


• Ubuntu evolution_2.2.1.1-0ubuntu4.2_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.2. 1.1-0ubuntu4.2_powerpc.deb

SGI ProPack 3.0 SP6

• SGI Patch 10212
  http://support.sgi.com/