Summary
The remote host is missing an update to imap
announced via advisory MDVSA-2009:064.
Solution
To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2009:064
Insight
Security vulnerabilities has been identified and fixed in University of Washington IMAP Toolkit which could allow local users to gain privileges by specifying incorrect folder name (CVE-2008-5005).
The updated packages have been patched to prevent this.
Affected: Corporate 3.0
Severity
Classification
-
CVE CVE-2008-5005 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities