Red Hat Evolution S/MIME Signature Verification Bypass (CVE-2009-0547)

Key Information Vulnerability ID: Bug 484925 (CVE-2009-0547) - CVE-2009-0547 Vulnerability Description: S/MIME signatures remain valid after email content is modified (MITM) Report Date: 2009-02-10 18:20 UTC Status: CLOSED ERRATA Affected Product: Security Response Component: vulnerability Operating System: Linux Priority: Medium Severity: Medium Fixed Version: Patch released Detailed Description Attack Potential: Due to an issue in how evolution handles S/MIME email messages, a man-in-the-middle (MITM) attack may be possible. If an S/MIME email is signed, evolution will still consider the signature valid even if the content has been modified. Impact Scope: The evolution package in Red Hat Enterprise Linux 4 and 5, as well as Fedora 9, 10, and development versions, is affected. PoC: Provides signed certificate, original message, and modified message, demonstrating that the signature remains valid after modification. Patches and Updates Red Hat Enterprise Linux: RHSA-2009:0354 and RHSA-2009:0355 Fedora: Updated to evolution-data-server-2.24.5-4.fc10 and evolution-data-server-2.22.3-3.fc9 Additional Information Upstream Bug Report: Includes a link to a Gnome Bugzilla report. Solution: When verifying S/MIME signatures, use a copy of the email text rather than the copy displayed to the user, to prevent remote attackers from forging signatures by modifying the displayed text copy.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat Evolution S/MIME Signature Verification Bypass (CVE-2009-0547)