CVE-2013-4279
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information...
CVE-2013-4279 is a medium vulnerability (CVSS 5.0) in Imapsync Project Imapsync, published March 12, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.84%, the 79th percentile. Fixed in imapsync 1.584-1.1.mga3.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.84%EPSS, 79th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.584-1.1.mga3imapsync +1 more
Description
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
- Record
CVE-2013-4279- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
- Record
CVE-2013-4279- Updated
- 2026-11-02
EUVDEUVD-2013-4177No score
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
- Record
EUVD-2013-4177- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9wf9-q5vr-wvw9No score
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information...
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.
- Record
GHSA-9wf9-q5vr-wvw9- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVMGASA-2014-0127No score
Updated imapsync packages fix an information disclosure
Updated imapsync package fixes security vulnerability:
Imapsync, by default, runs a "release check" when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl (CVE-2013-4279).
The imapsync package has been patched to disable this feature.
- Record
MGASA-2014-0127- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.redhat.com/show_bug.cgi?id=1000215
securityfocus.com/bid/65002
lists.fedoraproject.org/pipermail/package-announce/2014-March/130493.html
mandriva.com/security/advisories?name=MDVSA-2014:060
nvd.nist.gov/vuln/detail/CVE-2013-4279
github.com/advisories/GHSA-9wf9-q5vr-wvw9
advisories.mageia.org/MGASA-2014-0127.html
bugs.mageia.org/show_bug.cgi?id=12985