CVE-2013-4279

UnknownEPSS 1.79%

Last modified

CVE-2013-4279 is a vulnerability of currently unknown severity. imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.. EPSS estimates a 1.79% chance of exploitation in the next 30 days.

Description

imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.

Metrics

EPSS Probability
1.79%

75.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
Imapsync ProjectImapsync<= 1.564
Imapsync ProjectImapsync1.53
Imapsync ProjectImapsync1.500
Imapsync ProjectImapsync1.504
Imapsync ProjectImapsync1.508
Imapsync ProjectImapsync1.516
Imapsync ProjectImapsync1.518
Imapsync ProjectImapsync1.525
Imapsync ProjectImapsync1.542
Imapsync ProjectImapsync1.547
Imapsync ProjectImapsync1.554
Imapsync ProjectImapsync1.558

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-4279?
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
How severe is CVE-2013-4279?
Severity scoring for CVE-2013-4279 is pending analysis. The EPSS model estimates a 1.79% probability of exploitation in the next 30 days.
How do I fix CVE-2013-4279?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-4279?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST