{"id": "CVE-2013-7217", "bulletinFamily": "NVD", "title": "CVE-2013-7217", "description": "Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0.5, has \"critical\" impact and unspecified vectors, a different vulnerability than CVE-2013-7091.", "published": "2013-12-26T18:55:00", "modified": "2017-08-29T01:34:00", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7217", "reporter": "cve@mitre.org", "references": ["http://files.zimbra.com/website/docs/8.0/Zimbra_OS_Release_Notes_8.0.6.pdf", "http://www.zimbra.com/forums/announcements/67336-critical-security-vulnerability-addressed-7-2-6-8-0-6-maintenance-releases.html", "http://www.securityfocus.com/bid/64415", "http://files.zimbra.com/website/docs/7.2/Zimbra_OS_Release_Notes_7.2.6.pdf", "http://bugzilla.zimbra.com/show_bug.cgi?id=84547", "http://www.osvdb.org/101147", "https://exchange.xforce.ibmcloud.com/vulnerabilities/89847", "http://secunia.com/advisories/56138"], "cvelist": ["CVE-2013-7217"], "type": "cve", "lastseen": "2021-02-02T06:07:01", "edition": 6, "viewCount": 14, "enchantments": {"dependencies": {"references": [{"type": "nessus", "idList": ["ZIMBRA_7_2_6.NASL"]}], "modified": "2021-02-02T06:07:01", "rev": 2}, "score": {"value": 5.7, "vector": "NONE", "modified": "2021-02-02T06:07:01", "rev": 2}, "vulnersScore": 5.7}, "cpe": ["cpe:/a:zimbra:collaboration_server:8.0.0", "cpe:/a:zimbra:collaboration_server:7.2.4", "cpe:/a:zimbra:collaboration_server:7.2.1", "cpe:/a:zimbra:collaboration_server:7.2.5", "cpe:/a:zimbra:collaboration_server:7.1.3", "cpe:/a:zimbra:collaboration_server:8.0.4", "cpe:/a:zimbra:collaboration_server:8.0.3", "cpe:/a:zimbra:collaboration_server:7.0.1", "cpe:/a:zimbra:collaboration_server:7.2.0", "cpe:/a:zimbra:collaboration_server:7.2.3", "cpe:/a:zimbra:collaboration_server:7.1.0", "cpe:/a:zimbra:collaboration_server:7.1.2", "cpe:/a:zimbra:collaboration_server:7.0.0", "cpe:/a:zimbra:collaboration_server:7.1.4", "cpe:/a:zimbra:collaboration_server:7.2.2", "cpe:/a:zimbra:collaboration_server:8.0.5", "cpe:/a:zimbra:collaboration_server:7.1.1", "cpe:/a:zimbra:collaboration_server:8.0.1", "cpe:/a:zimbra:collaboration_server:8.0.2"], "affectedSoftware": [{"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.1.3"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.0.1"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.2.2"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "8.0.3"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "8.0.4"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.2.0"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.2.3"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "8.0.2"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.1.0"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "8.0.5"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "8.0.1"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.2.4"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "8.0.0"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.1.2"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.2.1"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.0.0"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.1.1"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "eq", "version": "7.1.4"}, {"cpeName": "zimbra:collaboration_server", "name": "zimbra collaboration server", "operator": "le", "version": "7.2.5"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:zimbra:collaboration_server:7.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:8.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:8.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:8.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.1.4:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:8.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:7.1.3:*:*:*:*:*:*:*", "cpe:2.3:a:zimbra:collaboration_server:8.0.1:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-noinfo"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:8.0.5:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:8.0.4:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:8.0.3:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:8.0.0:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.0.0:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:8.0.2:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.1.3:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.0.1:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.1.0:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.2.3:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.1.2:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.2.1:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:8.0.1:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.1.4:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.2.0:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.2.2:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.1.1:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.2.4:*:*:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:zimbra:collaboration_server:7.2.5:*:*:*:*:*:*:*", "versionEndIncluding": "7.2.5", "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "56138", "refsource": "SECUNIA", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/56138"}, {"name": "64415", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/64415"}, {"name": "http://www.zimbra.com/forums/announcements/67336-critical-security-vulnerability-addressed-7-2-6-8-0-6-maintenance-releases.html", "refsource": "CONFIRM", "tags": [], "url": "http://www.zimbra.com/forums/announcements/67336-critical-security-vulnerability-addressed-7-2-6-8-0-6-maintenance-releases.html"}, {"name": "zimbracollaborationserver-unspecified(89847)", "refsource": "XF", "tags": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89847"}, {"name": "http://bugzilla.zimbra.com/show_bug.cgi?id=84547", "refsource": "CONFIRM", "tags": [], "url": "http://bugzilla.zimbra.com/show_bug.cgi?id=84547"}, {"name": "http://files.zimbra.com/website/docs/7.2/Zimbra_OS_Release_Notes_7.2.6.pdf", "refsource": "CONFIRM", "tags": [], "url": "http://files.zimbra.com/website/docs/7.2/Zimbra_OS_Release_Notes_7.2.6.pdf"}, {"name": "101147", "refsource": "OSVDB", "tags": [], "url": "http://www.osvdb.org/101147"}, {"name": "http://files.zimbra.com/website/docs/8.0/Zimbra_OS_Release_Notes_8.0.6.pdf", "refsource": "CONFIRM", "tags": [], "url": "http://files.zimbra.com/website/docs/8.0/Zimbra_OS_Release_Notes_8.0.6.pdf"}], "immutableFields": []}

{"nessus": [{"lastseen": "2021-01-20T15:49:22", "description": "The Zimbra Collaboration Server installed on the remote host is\naffected by an unspecified vulnerability.\n\nNote that the vendor has supplied patches for release versions 7.2.2,\n7.2.3, 7.2.4, 7.2.5, 8.0.3, 8.0.4, and 8.05.\n\nAlso note that Nessus does not identify patch levels for the above\nversions. You will want to verify if the patch has been applied by\nexecuting the command 'zmcontrol -v' from the command line as the\n'zimbra' user.", "edition": 26, "published": "2014-03-03T00:00:00", "title": "Zimbra Collaboration Server < 7.2.6 / 8.0.6 Unspecified Vulnerability", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2013-7217"], "modified": "2014-03-03T00:00:00", "cpe": ["cpe:/a:zimbra:collaboration_suite"], "id": "ZIMBRA_7_2_6.NASL", "href": "https://www.tenable.com/plugins/nessus/72774", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(72774);\n script_version(\"1.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2013-7217\");\n script_bugtraq_id(64415);\n\n script_name(english:\"Zimbra Collaboration Server < 7.2.6 / 8.0.6 Unspecified Vulnerability\");\n script_summary(english:\"Checks version of Zimbra Collaboration Server\");\n\n script_set_attribute(\n attribute:\"synopsis\",\n value:\n\"The remote web server contains a web application that is affected by an\nunspecified vulnerability.\"\n );\n script_set_attribute(\n attribute:\"description\",\n value:\n\"The Zimbra Collaboration Server installed on the remote host is\naffected by an unspecified vulnerability.\n\nNote that the vendor has supplied patches for release versions 7.2.2,\n7.2.3, 7.2.4, 7.2.5, 8.0.3, 8.0.4, and 8.05.\n\nAlso note that Nessus does not identify patch levels for the above\nversions. You will want to verify if the patch has been applied by\nexecuting the command 'zmcontrol -v' from the command line as the\n'zimbra' user.\"\n );\n # http://www.zimbra.com/forums/announcements/67336-critical-security-vulnerability-addressed-7-2-6-8-0-6-maintenance-releases.html\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?febb129c\");\n # https://files.zimbra.com/website/docs/7.2/Zimbra_OS_Release_Notes_7.2.6.pdf\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?be410aa8\");\n # https://files.zimbra.com/website/docs/8.0/Zimbra_OS_Release_Notes_8.0.6.pdf\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?6549daf1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to version 7.2.6 / 8.0.6 or later or apply the vendor-\nsupplied patch.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No exploit is required\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2013/12/12\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2013/12/12\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/03/03\");\n\n script_set_attribute(attribute:\"potential_vulnerability\", value:\"true\");\n script_set_attribute(attribute:\"plugin_type\", value:\"remote\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:zimbra:collaboration_suite\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"CGI abuses\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2021 Tenable Network Security, Inc.\");\n\n script_dependencies(\"zimbra_web_detect.nbin\");\n script_require_keys(\"www/zimbra_zcs\", \"Settings/ParanoidReport\");\n script_require_ports(\"Services/www\", 80, 443, 7071);\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"http.inc\");\ninclude(\"webapp_func.inc\");\n\nport = get_http_port(default:443);\n\ninstall = get_install_from_kb(\n appname : \"zimbra_zcs\",\n port : port,\n exit_on_fail : TRUE\n);\n\napp = \"Zimbra Collaboration Server\";\ndir = install[\"dir\"];\nversion = install[\"ver\"];\ninstall_url = build_url(port:port, qs:dir);\n\nif (version == UNKNOWN_VER) audit(AUDIT_UNKNOWN_WEB_APP_VER, app, install_url);\nif (report_paranoia < 2) audit(AUDIT_PARANOID);\n\nver = split(version, sep:\".\", keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n v[i] = int(ver[i]);\n\n# Versions 7.x less than 7.2.6 and 8.x less than 8.0.6 are affected\nif (\n (v[0] < 7) ||\n (v[0] == 7 && v[1] < 2) ||\n (v[0] == 7 && v[1] == 2 && v[2] < 6) ||\n (v[0] == 8 && v[1] == 0 && v[2] < 6)\n)\n{\n if (report_verbosity > 0)\n {\n report =\n '\\n URL : ' + install_url +\n '\\n Installed version : ' + version +\n '\\n Fixed version : 7.2.6 / 8.0.6\\n';\n security_hole(port:port, extra:report);\n }\n else security_hole(port);\n exit(0);\n}\nelse audit(AUDIT_WEB_APP_NOT_AFFECTED, app, install_url, version);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}]}