BDU:2015-03060 (CVE-2009-4565)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2024-07-05 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Summary
Множественные уязвимости пакета rmail операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
7.5 (High) CVSS 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
Status
Confirmed by the vendor
Exploitation
Spoofing
Incidents
Being clarified
Remediation
Software update
CWE
  • CWE-310 - Проблемы использования криптографии
Aliases
CVE-2009-4565, DSA-1985, ID:1402039
References
Impacted products
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 4: ppc: libmilter0 - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 rmail - 8.13.8-3+etch1 sensible-mda - 8.13.8-3+etch1 libmilter0-dbg - 8.13.8-3+etch1 s390x: libmilter0-dbg - 8.13.8-3+etch1 libmilter0 - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 sensible-mda - 8.13.8-3+etch1 rmail - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 i686: libmilter0 - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 rmail - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 sensible-mda - 8.13.8-3+etch1 libmilter0-dbg - 8.13.8-3+etch1 hppa: rmail - 8.13.8-3+etch1 sensible-mda - 8.13.8-3+etch1 libmilter0 - 8.13.8-3+etch1 libmilter0-dbg - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 sparc: rmail - 8.13.8-3+etch1 libmilter0-dbg - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 libmilter0 - 8.13.8-3+etch1 sensible-mda - 8.13.8-3+etch1 x86-64: sensible-mda - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 libmilter0-dbg - 8.13.8-3+etch1 libmilter0 - 8.13.8-3+etch1 rmail - 8.13.8-3+etch1 ia64: libmilter0-dbg - 8.13.8-3+etch1 sensible-mda - 8.13.8-3+etch1 libmilter0 - 8.13.8-3+etch1 rmail - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 alpha: sensible-mda - 8.13.8-3+etch1 libmilter0 - 8.13.8-3+etch1 libmilter0-dbg - 8.13.8-3+etch1 rmail - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 noarch: sendmail-cf - 8.13.8-3+etch1 sendmail-doc - 8.13.8-3+etch1 sendmail - 8.13.8-3+etch1 sendmail-base - 8.13.8-3+etch1 mipsel: sendmail-bin - 8.13.8-3+etch1 libmilter0-dbg - 8.13.8-3+etch1 libmilter0 - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 sensible-mda - 8.13.8-3+etch1 rmail - 8.13.8-3+etch1 arm: sensible-mda - 8.13.8-3+etch1 libmilter0-dbg - 8.13.8-3+etch1 sendmail-bin - 8.13.8-3+etch1 libmilter-dev - 8.13.8-3+etch1 rmail - 8.13.8-3+etch1 libmilter0 - 8.13.8-3+etch1 Debian GNU/Linux 5: ppc: sendmail-bin - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 s390x: rmail - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 i686: rmail - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 hppa: sendmail-bin - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 sparc: sensible-mda - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 x86-64: sensible-mda - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 armel: libmilter1.0.1-dbg - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 alpha: libmilter1.0.1-dbg - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 ia64: rmail - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 mips: sendmail-bin - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 noarch: sendmail-cf - 8.14.3-5+lenny1 sendmail-doc - 8.14.3-5+lenny1 sendmail - 8.14.3-5+lenny1 sendmail-base - 8.14.3-5+lenny1 mipsel: libmilter1.0.1-dbg - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 libmilter1.0.1 - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 arm: libmilter1.0.1 - 8.14.3-5+lenny1 rmail - 8.14.3-5+lenny1 libmilter-dev - 8.14.3-5+lenny1 sendmail-bin - 8.14.3-5+lenny1 libmilter1.0.1-dbg - 8.14.3-5+lenny1 sensible-mda - 8.14.3-5+lenny1
To clipboard 

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\t\trmail - 8.13.8-3+etch1\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\ts390x:\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\trmail - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\ti686:\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\t\trmail - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\thppa:\n\t\trmail - 8.13.8-3+etch1\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\tsparc:\n\t\trmail - 8.13.8-3+etch1\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\tsensible-mda - 8.13.8-3+etch1\n\tx86-64:\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\trmail - 8.13.8-3+etch1\n\tia64:\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\trmail - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\talpha:\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\t\trmail - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\tnoarch:\n\t\tsendmail-cf - 8.13.8-3+etch1\n\t\tsendmail-doc - 8.13.8-3+etch1\n\t\tsendmail - 8.13.8-3+etch1\n\t\tsendmail-base - 8.13.8-3+etch1\n\tmipsel:\n\t\tsendmail-bin - 8.13.8-3+etch1\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\t\tlibmilter0 - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\trmail - 8.13.8-3+etch1\n\tarm:\n\t\tsensible-mda - 8.13.8-3+etch1\n\t\tlibmilter0-dbg - 8.13.8-3+etch1\n\t\tsendmail-bin - 8.13.8-3+etch1\n\t\tlibmilter-dev - 8.13.8-3+etch1\n\t\trmail - 8.13.8-3+etch1\n\t\tlibmilter0 - 8.13.8-3+etch1\nDebian GNU/Linux 5:\n\tppc:\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\ts390x:\n\t\trmail - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\ti686:\n\t\trmail - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\thppa:\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\tsparc:\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\tx86-64:\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\tarmel:\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\talpha:\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\tia64:\n\t\trmail - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\tmips:\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\tnoarch:\n\t\tsendmail-cf - 8.14.3-5+lenny1\n\t\tsendmail-doc - 8.14.3-5+lenny1\n\t\tsendmail - 8.14.3-5+lenny1\n\t\tsendmail-base - 8.14.3-5+lenny1\n\tmipsel:\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\tarm:\n\t\tlibmilter1.0.1 - 8.14.3-5+lenny1\n\t\trmail - 8.14.3-5+lenny1\n\t\tlibmilter-dev - 8.14.3-5+lenny1\n\t\tsendmail-bin - 8.14.3-5+lenny1\n\t\tlibmilter1.0.1-dbg - 8.14.3-5+lenny1\n\t\tsensible-mda - 8.14.3-5+lenny1",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "04.01.2010",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03060",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-4565, DSA-1985, ID:1402039",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438 (CWE-310)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 rmail \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1985/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4565",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-310",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.