This host is installed with Evolution for Linux and is prone to Information Disclosure Vulnerability.

Successful exploitation will let the local attacker gain sensitive information about the victim's mail folders and can view their contents. Impact level: Application

Upgrade to Evolution Mail Client version 2.30.1 or later For further updates refer, http://projects.gnome.org/evolution

The flaw is due to Mailer component in Evolution, uses world readable permissions for the .evolution directory and some other certain directories under .evolution which causes disclosure of sensitive information of the user's mail directories and their contents.

Evolution Mail Client version 2.26.1 and prior.

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409
• http://bugzilla.gnome.org/show_bug.cgi?id=581604
• https://bugzilla.redhat.com/show_bug.cgi?id=498648

---

Updated on 2015-03-25