CVE-2013-4279
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information...
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
Exploit likelihood
What each source reports
NVD Score used
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
- Record
CVE-2013-4279- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
- Record
CVE-2013-4279- Updated
- 2026-11-02
EUVDEUVD-2013-4177 No score
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
- Record
EUVD-2013-4177- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9wf9-q5vr-wvw9 No score
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information...
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
- Record
GHSA-9wf9-q5vr-wvw9- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVMGASA-2014-0127 No score
Updated imapsync packages fix an information disclosure
Updated imapsync package fixes security vulnerability:
Imapsync, by default, runs a "release check" when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl (CVE-2013-4279).
The imapsync package has been patched to disable this feature.
- Record
MGASA-2014-0127- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4279 is a medium vulnerability (CVSS 5.0) in Imapsync Project Imapsync, published March 12, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.84%, the 78th percentile. Fixed in imapsync 1.584-1.1.mga3.
References
bugzilla.redhat.com/show_bug.cgi?id=1000215
securityfocus.com/bid/65002
lists.fedoraproject.org/pipermail/package-announce/2014-March/130493.html
mandriva.com/security/advisories?name=MDVSA-2014:060
nvd.nist.gov/vuln/detail/CVE-2013-4279
github.com/advisories/GHSA-9wf9-q5vr-wvw9
advisories.mageia.org/MGASA-2014-0127.html
bugs.mageia.org/show_bug.cgi?id=12985