Sensitive Data Exposure in Evolution Data Server IMAPx Component
Summary
CVE-2016-10727: camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will n... Affects evolution-data-server across 4 version ranges.
< 3.22.0-2
< 7ce2be895c50b16d3450a2d4d30eed0bd9b43f8e
< 63438409a26d71152d9b4fab5efaadf7d55f80cc
< f26a6f67
Fixed in 3.22.0-2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Evolution Data Server is a core component of the GNOME desktop environment, providing essential services for managing personal information such as emails, contacts, and calendars. It supports various protocols, including IMAP, to facilitate email communication. However, prior to version 3.21.2, the IMAPx component had a significant vulnerability that could expose sensitive user data.
Vulnerability Detail
The vulnerability, identified as CVE-2016-10727, arises from the IMAPx component's failure to properly handle cleartext data containing passwords when a client requests STARTTLS, but the server does not support it. This flaw allows remote attackers to intercept sensitive information over the network, as the server was intended to reject such requests but instead continued processing them incorrectly. The severity of this vulnerability is underscored by its CVSS score of 9.8, indicating a critical risk to user data.
How To Fix
Minimum fixed version
3.22.0-2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade evolution-data-serverTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the use of STARTTLS in their email client settings until the server is updated. This will prevent the client from attempting to establish a STARTTLS connection, thereby avoiding the exposure of cleartext passwords.
Conclusion
CVE-2016-10727 represents a critical vulnerability in the Evolution Data Server's IMAPx component, allowing for the potential exposure of sensitive user data. Users are strongly advised to upgrade to the latest version to mitigate this risk. For real-time monitoring of vulnerabilities, tools like Vulert can be invaluable.
See every vulnerability recorded for evolution-data-server →
FAQ
CVE-2016-10727 is a vulnerability in the Evolution Data Server's IMAPx component that allows for the exposure of sensitive data, including passwords, due to improper handling of STARTTLS requests.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability could allow attackers to intercept sensitive user information, leading to unauthorized access to email accounts and other personal data.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software by analyzing your manifest file, such as package-lock.json.
If an immediate upgrade is not possible, consider disabling STARTTLS in your email client as a temporary measure to protect your passwords from being exposed.
Related vulnerabilities
Recent vulnerabilities recorded for evolution-data-server.
