Nom du paquet
imap
Date
2009-03-02
Advisory ID
MDVSA-2009:064
Affected versions
CS3.0 i586 , CS3.0 x86_64

Problem description

Security vulnerabilities has been identified and fixed in University
of Washington IMAP Toolkit which could allow local users to gain
privileges by specifying incorrect folder name (CVE-2008-5005).

The updated packages have been patched to prevent this.

Updated packages

CS3.0 i586

 35d1595673a4b729cd9c3c4d31d51417  corporate/3.0/i586/imap-2002d-8.4.C30mdk.i586.rpm
 9c7b39600c42ee3f77e7cb2e2646eadd  corporate/3.0/i586/imap-devel-2002d-8.4.C30mdk.i586.rpm
 3687a88d8791bcf26e54e4d3dee5e0b1  corporate/3.0/i586/imap-utils-2002d-8.4.C30mdk.i586.rpm 
 cd3862f4498e8302be7290f20d1bcce8  corporate/3.0/SRPMS/imap-2002d-8.4.C30mdk.src.rpm

CS3.0 x86_64

 8a616b9dff2145f6e4723a5078e6be1a  corporate/3.0/x86_64/imap-2002d-8.4.C30mdk.x86_64.rpm
 eeb9a45bc92829002597be3e9161b817  corporate/3.0/x86_64/imap-devel-2002d-8.4.C30mdk.x86_64.rpm
 021365d905793a741f61f6b6268a9180  corporate/3.0/x86_64/imap-utils-2002d-8.4.C30mdk.x86_64.rpm 
 cd3862f4498e8302be7290f20d1bcce8  corporate/3.0/SRPMS/imap-2002d-8.4.C30mdk.src.rpm

References