CVE-2013-4279

EUVD-2013-4177
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Affected Products (NVD)
VendorProductVersion
imapsync_projectimapsync
𝑥
≤ 1.564
imapsync_projectimapsync
1.53
imapsync_projectimapsync
1.500
imapsync_projectimapsync
1.504
imapsync_projectimapsync
1.508
imapsync_projectimapsync
1.516
imapsync_projectimapsync
1.518
imapsync_projectimapsync
1.525
imapsync_projectimapsync
1.542
imapsync_projectimapsync
1.547
imapsync_projectimapsync
1.554
imapsync_projectimapsync
1.558
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
imapsync
lucid
ignored
precise
dne
quantal
dne
raring
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130493.html
http://www.mandriva.com/security/advisories?name=MDVSA-2014:060
http://www.securityfocus.com/bid/65002
https://bugzilla.redhat.com/show_bug.cgi?id=1000215
http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130493.html
http://www.mandriva.com/security/advisories?name=MDVSA-2014:060
http://www.securityfocus.com/bid/65002
https://bugzilla.redhat.com/show_bug.cgi?id=1000215