CVE-2013-4279

imapsync < 1.564 - Unauthenticated Exposure of Sensitive Information via Release Check

Title source: llm
STIX 2.1

Description

imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/65002
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130493.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2014:060

Scores

EPSS 0.0180
EPSS Percentile 75.9%

Details

CWE
CWE-200
Status published
Products (12)
imapsync_project/imapsync 1.53
imapsync_project/imapsync 1.500
imapsync_project/imapsync 1.504
imapsync_project/imapsync 1.508
imapsync_project/imapsync 1.516
imapsync_project/imapsync 1.518
imapsync_project/imapsync 1.525
imapsync_project/imapsync 1.542
imapsync_project/imapsync 1.547
imapsync_project/imapsync 1.554
... and 2 more
Published Apr 18, 2014
Tracked Since Feb 18, 2026