Information disclosure in Imapsync Project

CVE-2013-4279

imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.3th percentile) — read the EPSS interpretation.

Affected products

Imapsync_project Imapsync — versions 1.53, 1.500, 1.504
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

secalert@redhat.com (x_refsource_CONFIRM, Exploit)
secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)