CVE-2005-0102

Name of the Vulnerable Software and Affected Versions Evolution versions 2.0.2 and earlier

Description The issue allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1. This leads to a zero byte memory allocation and a buffer overflow in the camel-lock-helper.

Recommendations For Evolution versions 2.0.2 and earlier, update to a version later than 2.0.2 to resolve the issue. As a temporary workaround, consider restricting access to the camel-lock-helper until a patch is available.