=========================================================== 
Ubuntu Security Notice USN-475-1              June 21, 2007
evolution-data-server vulnerability
CVE-2007-3257
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libcamel1.2-8                            1.6.1-0ubuntu7.1

Ubuntu 6.10:
  libcamel1.2-8                            1.8.1-0ubuntu5.1

Ubuntu 7.04:
  libcamel1.2-10                           1.10.1-0ubuntu1.1

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

Details follow:

Philip Van Hoof discovered that the IMAP client in Evolution did not
correctly verify the SEQUENCE value.  A malicious or spoofed server
could exploit this to execute arbitrary code with user privileges.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   395027 9277d6de0c85de3ed54c1e98ff1694d0
          Size/MD5:     1270 37bc93808386f19b2a70231762324351
          Size/MD5: 10024689 2dd6540ece7f075aa3b1f3d670332066

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  3980922 ff2f50f5a6aa1c64d7bfe5210af35b99
          Size/MD5:    53710 c0f42936b88222539417a344f5abf970
          Size/MD5:   839204 fbea989803c95270e11c2eb368d70b61
          Size/MD5:   627462 3029ce3126cfa23ff9323e4cdb693777
          Size/MD5:   116988 80f30a32781a3bd2faf7162f3f592c44
          Size/MD5:   138470 3b2000f9098f669f1535091cc36a106e
          Size/MD5:    75246 3998c5250d4c3b057e210a1f7a0ccffb
          Size/MD5:   315808 c6cc608594f09340b66b881dee03065b
          Size/MD5:   119284 77aaa31eeecffe264cec697f7efd4488
          Size/MD5:   100112 dab3d4f963d58398556ad728fe958f1a
          Size/MD5:    69288 cf0b54c9200a7d8940cc63d81062e35f
          Size/MD5:   112334 dedd2489c2946221541d65be2038ad78
          Size/MD5:    74128 26ddb946021aabe82c08698d3c4e8a0e
          Size/MD5:   122578 5b2b4fd152de41118bec47b817c98cdd
          Size/MD5:    68786 cfeae7eeba30c54929f3a360b125b053
          Size/MD5:   121984 2487e7543f7c825752b53016965e31ae
          Size/MD5:    61552 aaa1cd170ec83cda58487dca940fb0c4
          Size/MD5:   110230 5decd5068d7a6475b810159532863825
          Size/MD5:    62090 9b5201ee5960dc36e2b0b60c650620ad
          Size/MD5:   178560 ce57dc83d2ee595d7472b0c57e60550e
          Size/MD5:    93300 0b1a2003b9fb756086c854144e8a58c8

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  3258900 1eae073c3d86f86b584db5f455df5595
          Size/MD5:    53710 d8b4f71d07f8173e3d9505e090030a98
          Size/MD5:   760070 0dcb4404530e44e063606295d097b94b
          Size/MD5:   549630 b289bf7b25bb00fb554502797b4dde6b
          Size/MD5:   116998 0e043fa3cc212773654b881109c207bd
          Size/MD5:   124568 7946aa2eac9b782c9a3c301aeff557fe
          Size/MD5:    75256 31b52368178cf6c7f352dc1b6d8679d1
          Size/MD5:   273042 d8b369340b74d8d0e4e67bdf3a50e156
          Size/MD5:   119298 eece724b0b55ae42aea98fb40603cce5
          Size/MD5:    90474 a0602838abbaf839c886b3a30e9068e9
          Size/MD5:    69292 1c9176d7c9ece53eddf56186b4e84618
          Size/MD5:   100340 0bf39a296f66fe7a0de208c21aac8fd0
          Size/MD5:    74132 8c7b67c04017970179ed8171b2408d67
          Size/MD5:   111774 76af96de1792b5b9497e5d1cf23aec5b
          Size/MD5:    68786 5d7f3e5f97df8be4e3377dcaee3d84bd
          Size/MD5:   112166 1353b3e9237cc87266ef8c104a1b274a
          Size/MD5:    61552 ce1ac36134619d3394cb7da740f06298
          Size/MD5:   103028 6f0d50a21d800c6208f1def45e84439c
          Size/MD5:    62094 6ff0092af13e93e73582480de897e150
          Size/MD5:   160824 513a3ecd4f036757c33e1c89129c2ccc
          Size/MD5:    93306 6f1bbdeb42d673321c403d7bbca9d871

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  3897570 a9c8ba065ba7e4698dc34ac092c61f59
          Size/MD5:    53716 b3ee12ab8d29282b044e7e7d64f71309
          Size/MD5:   787616 4d9ecd01892626f4fc5fea96696de494
          Size/MD5:   597384 33b0ccb20130b56e68b3ce1a4c2a02d7
          Size/MD5:   117012 143e9efcd44b4d8c852b29a12359fa62
          Size/MD5:   128582 1302e90b986381066df8fde57ac226b4
          Size/MD5:    75264 1878f3ebc5a6d326e8b052e516275396
          Size/MD5:   285692 19590229e68acec157c439ca48eadb6a
          Size/MD5:   119286 17c926f13779152e868d24ca642922fb
          Size/MD5:    94158 be455811ce80b402395ac1c7a387dd80
          Size/MD5:    69288 962946a1ead89f23858c94878e753c9b
          Size/MD5:   104446 e79ef7944d7a0033c3221b6c463b1996
          Size/MD5:    74140 77279a4cb2b3223323c4090897c3b7db
          Size/MD5:   116962 b35967881608040ce0b5b4efb965529f
          Size/MD5:    68798 7525d99aa57981b024afa17666e0cc57
          Size/MD5:   115804 231862538c141549dd76c2e205aaa766
          Size/MD5:    61554 1254fb30c41424731abb6116b3b3c161
          Size/MD5:   106688 e034c55f7c7962ccf0af0f7a70cc1a22
          Size/MD5:    62090 3ce84156ac573f40253592a4b7d07ee0
          Size/MD5:   174018 83d6aa7ba1a2de6d60bcefc93c71e0de
          Size/MD5:    93312 d986b6e7226b8215bb11a3b04d025b7a

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  3260100 e81d0c5801431cda7795e35e7f3487fb
          Size/MD5:    53716 fb109838ab57d0ac41bfe4858776224e
          Size/MD5:   754860 a95844414fdb8250c89c69dffa7a0fde
          Size/MD5:   567790 c1d6e17c45f2c94dcdaf1fd3fd5723d0
          Size/MD5:   117012 b075a5d94c16342b574cb8d56d7584be
          Size/MD5:   126974 6ffd65ebe8bd5433fad4ef5011019835
          Size/MD5:    75266 282cb551a6ed9e3c74db421df7f13247
          Size/MD5:   277180 759f821333586df01f174db205277bbe
          Size/MD5:   119300 37b5e03aa50f96f9cf98e77290c2ced7
          Size/MD5:    92022 8bfe4dccca0da79d8f88c1fe3d1f0e4c
          Size/MD5:    69290 18344b4ab2bf2e37c68909602cb6bd89
          Size/MD5:   102692 f6f42f6f8f9a7d7d368bef34d8987f00
          Size/MD5:    74144 fef2af71417a53a2f52daf009d833e13
          Size/MD5:   115528 42607d6a0b420a45e808f9b8edd5f384
          Size/MD5:    68792 6719609cf1801027453b181601d09a82
          Size/MD5:   114758 81269734c2de40141804306365a55b79
          Size/MD5:    61554 ebace52cfa50081ac0c0caa209a3eed4
          Size/MD5:   106824 a5030f8fb89638658759ae790e41e198
          Size/MD5:    62094 bf4ae39c74f740fdaaac8abd2ba559dd
          Size/MD5:   170028 b3b6f8917ebc09bc2313b3c98cf3894a
          Size/MD5:    93316 bac9484f929263eccead01dc7800c5f3

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:    24601 bd05b0a12ec760046270aec1b7b03804
          Size/MD5:     1558 f15147761e3206edf061e97fd87852df
          Size/MD5: 10055797 8c1f2885ec24a50edad3ac02c62d43bf

  Architecture independent packages:

          Size/MD5:   113692 6470c7226d3cecfd35c078be9dc33334

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  3235084 65ce43e984c933e640dd6aa704ecbb05
          Size/MD5:    57332 5520b3569bc521cc2900a9b4fd05e53c
          Size/MD5:   486012 19c98e47618f389657e8dc78ef746659
          Size/MD5:   360516 6dc5cff868ae767388270a17d0d28d7b
          Size/MD5:   121024 5f0971aad117f7eb9623dc108fb1ce55
          Size/MD5:   142958 884b81ae096303123a7883304ab8d302
          Size/MD5:   136506 6fcdca8a38d18cd75d0b2f30485c450b
          Size/MD5:   316902 720c40b4f0f2a2a79ff0ebc6f5cdc904
          Size/MD5:   173044 298f661dff3f972b42be6a22a4532026
          Size/MD5:   105306 5dc8a682ef63cbd7b3336a3b0132a9d3
          Size/MD5:    73314 04d8a7483f49ba37506db9d2cf394052
          Size/MD5:   116710 28302ea0ac5a7376eceba2e749f3edea
          Size/MD5:   108904 4658905bdc8044456dfe0f7e05d1056b
          Size/MD5:   127376 c838688013a83f7ed9c83c6329c8d3c7
          Size/MD5:   123864 669bc7a26abce5fd86291f40fdf8091d
          Size/MD5:   126414 8e277f1beea933ac7fc5f1308f4dfd27
          Size/MD5:    64702 796d290ec7b9f10046cb05393caaaf46
          Size/MD5:   114566 016459e5b4d6f8fed65b8fa7e321689e
          Size/MD5:    65576 b7aac99747491298721a89637dd043f3
          Size/MD5:   184420 d8c2d2ac2114d206388e1aef38aae7c6
          Size/MD5:    97186 c568922f177a8f132375daba2ed7d928

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  3004450 415c82459e0ef881592febc5417acd11
          Size/MD5:    57328 d86b8d458cb2caa11ab44b4de4954832
          Size/MD5:   444174 8bf8b98721adf5297ca60eba28d88c86
          Size/MD5:   328710 f86a60c4520c0192476c54ff061b326c
          Size/MD5:   121040 010a93f200cb2c78a0239730d4f3170c
          Size/MD5:   130958 1873f4f2c5de57cca3b25094b0b48a0e
          Size/MD5:   136510 33784e43431839434745274f7840dbd9
          Size/MD5:   291736 d79ebfcd5f840881727d986a7ded5d8e
          Size/MD5:   173032 888e8814cf368eda79ce18afa8f929dd
          Size/MD5:    96982 35b8c43bdb061d03c5cbfaa4501be353
          Size/MD5:    73322 b4a1d09b1db86c92753642856bccc0d7
          Size/MD5:   105414 1969b287a73bfc5c25c56018e185fabc
          Size/MD5:   108910 de3e526d8b229dc88d88970e2a550949
          Size/MD5:   119694 a123d346c4782a3e640ed4e055a7901f
          Size/MD5:   123862 2bf05ae29dc8bf9973a90852e4fad264
          Size/MD5:   119888 d825c69b989aa920f9f49861462b0965
          Size/MD5:    64692 615d67d26ac7869f8b4f1cba6d924ca3
          Size/MD5:   109510 185704c5be9ec492a2496062bd080188
          Size/MD5:    65572 43c637cc30cc15cdd3ddd34711d2fa66
          Size/MD5:   172324 e9e7c9e001964b0de98cb8a0626d2197
          Size/MD5:    97196 d6608fa5cfaafacd59bebcc9a1b4c344

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  3219774 6edfe17103a84eb982dad73909cd25ce
          Size/MD5:    57332 612ecfc9ba2d8977479eff17ad93a1a5
          Size/MD5:   474250 772f3dfe8b7c037c045cf72a4d8734f5
          Size/MD5:   342040 b6329d8db0aeab300ee215ed5d078580
          Size/MD5:   121044 5118d11940f3687a0c97ed325310dd0d
          Size/MD5:   133322 0b49623931a2eb3e6010426adc41db0d
          Size/MD5:   136516 b4f5638499a3186e448ef475f8f18fb6
          Size/MD5:   289580 d9bb5199424fb3441b60998ed4d295f9
          Size/MD5:   173034 9e4bcf336601ae37172061cd45e7f5e2
          Size/MD5:    99970 9eef95c4cb680cd52b3c69a423e7dc4f
          Size/MD5:    73318 cb1b3a10f39305f2692bf72f1b388fc8
          Size/MD5:   108948 16c4a6a74b5607c5e42987e2f8e5de54
          Size/MD5:   108918 e61e88357187627591f7e5ec3c6dbb46
          Size/MD5:   122988 a23c19b9a8349a8a5639631d96ce2e8e
          Size/MD5:   123868 7d3352bd8bc22cca639fd4f6d9310969
          Size/MD5:   121298 ba90907efbac249d82e32eb3fd8c9db7
          Size/MD5:    64704 fe10b96d51bb3b4fe60d5ef9b00b33ed
          Size/MD5:   111964 e7215c3051339fb61810f10a6cd845b3
          Size/MD5:    65576 1ddd7289fcbec7fda69f452798f2abbd
          Size/MD5:   180740 185f12a551bdf14925e04119fb660713
          Size/MD5:    97192 55c8733cb13d9231093c838a84f9d226

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2884394 d26075158363bcce8d49b0d9c214f5f1
          Size/MD5:    57330 6977af1733488fa6676f203034bc196d
          Size/MD5:   436520 2028826e44133b6b3ea1024756ffd622
          Size/MD5:   329766 87edcd40331bead7b623f4d3eb4005ea
          Size/MD5:   121042 aa951749f2092e217435d15b9d8f1a59
          Size/MD5:   131062 ea379a565f6bdeaa2b4627af31be1a54
          Size/MD5:   136512 687ef1ed75d4bef1f386f70c29d41c48
          Size/MD5:   280370 dc1685cefc21e2b960e652549ac016e4
          Size/MD5:   173056 6115a265986727811a15ac8f8b8ac0ba
          Size/MD5:    97500 d884f9ba7fe123f74104bc651e1ce725
          Size/MD5:    73324 5d430e8176c71b410c3825c74da4c535
          Size/MD5:   106906 f3b7f4e4c15d8f1bb48e3a066b6b5e8b
          Size/MD5:   108916 01ddfa5c173edb832efd337416d4d058
          Size/MD5:   120284 c297c583ae63f05bae622414a131de89
          Size/MD5:   123862 b06933e84b0bde4aa0b9b005cc6a2600
          Size/MD5:   119774 a0f094abeafcded7467d80d1fb0ed949
          Size/MD5:    64704 d2e404cf3c5a9e62e513194780d8d19e
          Size/MD5:   111272 e98c138964a599ea5e041133d681b789
          Size/MD5:    65578 eddfe98661c261cad1510fddbe4b57e5
          Size/MD5:   176220 1d1165f9493f66558b9e2a39c1a371cd
          Size/MD5:    97188 133e7f289ac699476f9c90d8f1e1b653

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:    17546 fbfbb12416f4957ccc9242c387bd37d5
          Size/MD5:     1820 251eabbd64cd36357fa41defea24f415
          Size/MD5: 10176208 ed01cc1d76de2b16c47486329328fa1d

  Architecture independent packages:

          Size/MD5:   116470 8f4ef521c80f74eaff143d99b2201be0

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:  3253466 270398aff678f36fa4013446f6bf33ee
          Size/MD5:    59888 c8a6de9cf2fc40da362d3c17df27e047
          Size/MD5:   493250 543cc1e674d9f4ea9936abf37a32b3f8
          Size/MD5:   371556 553f81c57febb35dd460eb09c3e65a3c
          Size/MD5:   123882 8c4ac1eaf45d5ce2de1e7c43e4ff7e5c
          Size/MD5:   148036 a5c9e5a1a71c2cc018505b9719daa136
          Size/MD5:   146924 5d25bb020dde2b468d436f6bda49b0f4
          Size/MD5:   333226 51e508833f8bc83f4897e0a683c546c0
          Size/MD5:   192334 6e475d0d73d985d53787ca47f1d835d2
          Size/MD5:   109772 ca7c04462cb760e8eaebcb6601d4b3f0
          Size/MD5:    76234 cd30f27ce928c4922e960ea3bf8b7063
          Size/MD5:   121932 300a70577c5583ee18b7e077ad7b69ff
          Size/MD5:   116938 7910c2e1822e65da02b3ffc3d14a63f7
          Size/MD5:   132672 f962d07d7a7eae7fe9f6889fbb35aed1
          Size/MD5:   139764 e7080829202c0156f7cd193c6cd4a4fd
          Size/MD5:   130754 50e32ac9429fe4875d6e42c0f65bf1ec
          Size/MD5:    67498 e5aca30c7acf82556060328ff855c252
          Size/MD5:   119128 59e1ef61e5ca047f8b81480428bd9fd7
          Size/MD5:    68364 c1afb788776abe5981e3df343a31935b
          Size/MD5:   191430 704d194f4c47e3e7522380226e3e6fcc
          Size/MD5:   100230 dd2c3f4a574feeabb4a62928f270cb01

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:  3023320 4d6c12e52f0f6bd80b98cd0d26e16469
          Size/MD5:    59892 6f831a72d69ede9e2bc4b5a256a8da47
          Size/MD5:   450976 42797c352789540d77979e5ca988cd47
          Size/MD5:   339006 66fc0d15899247e6b863ebd1af721e5e
          Size/MD5:   123878 00f5670e08da2c3a74aebb42ab471c1f
          Size/MD5:   135610 b72441431c9e8b4b3a7f0f374bf1b092
          Size/MD5:   146930 8c1c92fe427c1a61cc30f0757fc9237c
          Size/MD5:   306990 74513fcb97c90cdb748f8b03d9a1023b
          Size/MD5:   192336 bf752900b5c0e2b05612cf95a25e20e0
          Size/MD5:   101332 babae5a0035664a417856a169d152c4e
          Size/MD5:    76236 87c90f513fad572c96db62110f2ce32c
          Size/MD5:   110532 a02243b7746ac65d035a3e7a12b7a951
          Size/MD5:   116954 ac51e71f7b7af5eeb8a01c17e41ea689
          Size/MD5:   124816 1489a59b5633f39b3ef94aa69b18e158
          Size/MD5:   139764 9ce687b80a6374e0efc29be0b29d26fd
          Size/MD5:   124056 fdbe087dfb11f19db6ef2be9bf503561
          Size/MD5:    67504 550f59173aa9fb149835628216f85bda
          Size/MD5:   113836 6003c6ef707e6200b2f4cc0224cca55b
          Size/MD5:    68372 f077562c12341798c67bdb830a02e2c1
          Size/MD5:   178338 02d1e6c74610ca3faa490d35698e63dc
          Size/MD5:   100226 bdc793b2a421121044ef911d9341a5ac

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:  3233062 79359dceca0e7aa61d41a5b7c8bfb11f
          Size/MD5:    59900 e2f5130deff2e3a8edf6ef38ab99f76d
          Size/MD5:   528248 4d4766dcf123cdd3cb244001110cc686
          Size/MD5:   378054 22df728cf900f1753582f80e8b29a6b3
          Size/MD5:   123886 20645caaebfdf31653a090a650ad8139
          Size/MD5:   142482 7273fcad3e9070acac93a415ebcc1cb7
          Size/MD5:   146952 b571118472d98ab360d9b1558063e3f4
          Size/MD5:   324198 4e243a409b936906aac16ba3fc2e6e01
          Size/MD5:   192344 397c51babe023cdd5ac6f0cff58a4ffd
          Size/MD5:   108152 99b117e3cb49869a6dfbf15f11b07cd6
          Size/MD5:    76244 2d8fea6dfaa3f735c6ae92eeaffb6d09
          Size/MD5:   118204 2a7affbd3f6255abcf65fec114780dd1
          Size/MD5:   116948 bc9faa32ce4b59ca77b9dd15d7ca999d
          Size/MD5:   134060 f7183098de2bb84f6b41ee40d5b3f6fc
          Size/MD5:   139788 6d6aa5e3be6143909c1acae0da0e1a04
          Size/MD5:   132574 3e6ca2683c8ed7e29f3cd5f1bf4f34b8
          Size/MD5:    67500 3aa8c73b89a8f42170c51743efb41ad1
          Size/MD5:   118850 9bd1f698c8f97ca79553d7336d1a1847
          Size/MD5:    68370 7dcc28b47b87369f859c2b57d9ad5746
          Size/MD5:   197136 1a781e4a7b366809386ee75e88473afd
          Size/MD5:   100246 4fb01846a587d970617ccd691e4805a2

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:  2904580 8ea33c6dbf9a59768a839b0c7da07d37
          Size/MD5:    59896 7e4aa2d80acba6842a42841bdbad317c
          Size/MD5:   443272 d1660fa1f5502dafa00825ca6490f809
          Size/MD5:   339526 3503a274dfec374d0e91fabe3edebafd
          Size/MD5:   123886 2bf4fbedd3d9fcc23fd0192a37bde81b
          Size/MD5:   135664 89414044fa549d182b5a90433f7d3af2
          Size/MD5:   146944 9b93b8f9e1fd5d0561e9ed96c4f5eebd
          Size/MD5:   295984 45cebe0df644956761de2395d8d7c369
          Size/MD5:   192356 0b19f4c7ac0cf35b30fa16868164a267
          Size/MD5:   101894 118d0950f06836da66a792099dcc623e
          Size/MD5:    76252 624d9fa90afb28a8607a62f667fbacbd
          Size/MD5:   111810 c4afc15df5c1c8903550e129afcdc072
          Size/MD5:   116946 6ea4648a841f7b263be36e6c1c39d7eb
          Size/MD5:   125738 f9477d930c1f328df293e8eb5077cf8e
          Size/MD5:   139770 4431a7292eecf8069d22b567b143b4aa
          Size/MD5:   123864 08b08af0a67640401c21d7d81e5243d3
          Size/MD5:    67508 f5e054d5fa7abaa92c5d0f7c370776fe
          Size/MD5:   115566 642dac982c901a741efb1dda6b048bc7
          Size/MD5:    68374 9f766d855215869a038d0bdbc7fe3ba5
          Size/MD5:   182122 1430ff04e74ee456b325a26f9a6a6091
          Size/MD5:   100244 6a0a8ea6f74e819c192b832f5e9c388d


Ubuntu: evolution-data-server vulnerability

June 29, 2007
Philip Van Hoof discovered that the IMAP client in Evolution did not correctly verify the SEQUENCE value

Summary

Update Instructions

References

Severity
Ubuntu Security Notice USN-475-1 June 21, 2007

Package Information

Related News