KDE KMail does not encrypt attachments in emails when automatic encryption is enabled, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kmail | Kde | 4.11.5 (including) | 4.11.5 (including) |
| Kdepim | Ubuntu | esm-infra-legacy/trusty | * |
| Kdepim | Ubuntu | trusty | * |
| Kdepim | Ubuntu | trusty/esm | * |
| Kdepim | Ubuntu | upstream | * |
| Kdepim | Ubuntu | utopic | * |
References
- http://www.openwall.com/lists/oss-security/2015/07/16/10
- http://www.securityfocus.com/bid/75986
- https://bugs.kde.org/show_bug.cgi?id=340312
- https://bugzilla.redhat.com/show_bug.cgi?id=1243777
- http://www.openwall.com/lists/oss-security/2015/07/16/10
- http://www.securityfocus.com/bid/75986
- https://bugs.kde.org/show_bug.cgi?id=340312
- https://bugzilla.redhat.com/show_bug.cgi?id=1243777