REDHAT-BUG-484925: Medium severity evolution vulnerability
A man-in-the-middle-attack possibility was found in the way evolution handles the Secure / Multipurpose Internet Mail Extensions (S/MIME) mail messages. If the S/MIME email was sign, the email message subsequently modified, evolution would consider the S/MIME message signature to be valid even for such a modified message. An attacker could use this flaw to modify the emails (message integrity violation) between communicating part.
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-484925?
The severity of REDHAT-BUG-484925 is considered high due to the potential for man-in-the-middle attacks.
How do I fix REDHAT-BUG-484925?
To fix REDHAT-BUG-484925, update GNOME Evolution to the latest version that addresses this vulnerability.
What systems are affected by REDHAT-BUG-484925?
REDHAT-BUG-484925 affects GNOME Evolution when handling S/MIME email messages.
What type of attack does REDHAT-BUG-484925 describe?
REDHAT-BUG-484925 describes a man-in-the-middle attack due to improper validation of S/MIME signatures.
Is there a workaround for REDHAT-BUG-484925?
Currently, there are no documented workarounds for REDHAT-BUG-484925 aside from applying the necessary updates.