CVE:CVE-2013-4166
CNNVD:CNNVD-201401-018
GNOME Evolution是一套用于Linux的Gnome桌面环境的邮件客户端程序。该程序提供Email、日历、会议安排、联系人管理等功能。
GNOME Evolution 3.8.4及之前版本存在信息泄露漏洞，该漏洞源于程序使用错误的加密密钥。本地攻击者可利用该漏洞获取敏感信息。
solution:Upgrade gnome evolution to a higher version than 3.8.4,and avoid the version (,3.8.4]; Upgrade gnome evolution_data_server to a higher version than 3.9.5,and avoid the version (,3.9.5]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0