Unscored severity · published Mar 14, 2009
CVE-2009-0582
The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier,…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
Evolution-data-server · Gnome
through 2.24.5; 2.25.92 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0582
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0582
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
mail.gnome.org
http://mail.gnome.org/archives/release-team/2009-March/msg00096.html
osvdb.org
http://osvdb.org/52673
Vendor Advisory
http://secunia.com/advisories/34286
secunia.com
http://secunia.com/advisories/34338
secunia.com
http://secunia.com/advisories/34339
More from Evolution-data-server
7.5
CVE-2013-4166
The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG…
5.9
CVE-2020-16117
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line…
5.9
CVE-2020-14928
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3
5.7
CVE-2026-110777
Evolution-data-server: local file disclosure via attach file:// uris
5.6
CVE-2026-2604
Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling