CVE-2009-1631
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the ...
CVE-2009-1631 is a low vulnerability (CVSS 2.1) in Gnome Evolution, published May 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in evolution 2.29.90-1.
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
Exploit likelihood
What each source reports
NVD Score used
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
- Record
CVE-2009-1631- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
- Record
CVE-2009-1631- Updated
- 2026-11-02
EUVDEUVD-2009-1626 No score
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
- Record
EUVD-2009-1626- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8vh-phfc-qrw2 No score
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the ...
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
- Record
GHSA-q8vh-phfc-qrw2- Updated
- 2026-11-02
OSV No score
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
- Record
CVE-2009-1631- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1631 No score
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
- Record
DEBIAN-CVE-2009-1631- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409
bugzilla.redhat.com/show_bug.cgi?id=498648
bugzilla.gnome.org/show_bug.cgi?id=581604
securityfocus.com/bid/34921
openwall.com/lists/oss-security/2009/05/12/6
nvd.nist.gov/vuln/detail/CVE-2009-1631
github.com/advisories/GHSA-q8vh-phfc-qrw2
security-tracker.debian.org/tracker/CVE-2009-1631