Lucene search
Gentoo FoundationMGASA-2014-0116HistoryMar 04, 2014 - 12:01 a.m.
Updated egroupware package fixes security vulnerability
2014-03-0400:01:25
Gentoo Foundation
advisories.mageia.org
12
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.4%
eGroupware prior to 1.8.006.20140217 is vulnerable to remote file deletion and possible remote code execution due to user input being passed to PHP’s unserialize() method (CVE-2014-2027).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | egroupware | < 1.8.006.20140217-1 | egroupware-1.8.006.20140217-1.mga3 |
| Mageia | 4 | noarch | egroupware | < 1.8.006.20140217-1 | egroupware-1.8.006.20140217-1.mga4 |
Related
nessus
nessus
Mandriva Linux Security Advisory : egroupware (MDVSA-2015:087)
2015-03-30 00:00:00
GLSA-201711-12 : eGroupWare: Remote code execution
2017-11-13 00:00:00
nvd
nvd
CVE-2014-2027
2015-03-31 14:59:00
cvelist
cvelist
CVE-2014-2027
2015-03-31 14:00:00
prion
prion
Design/Logic Flaw
2015-03-31 14:59:00
openvas
openvas
EGroupware 'unserialize()' Multiple PHP Code Execution Vulnerabilities
2017-02-01 00:00:00
Mageia: Security Advisory (MGASA-2014-0116)
2022-01-28 00:00:00
packetstorm
packetstorm
Egroupware 1.8.005 PHP Object Insertion
2014-02-21 00:00:00
cve
cve
CVE-2014-2027
2015-03-31 14:59:00
gentoo
gentoo
eGroupWare: Remote code execution
2017-11-12 00:00:00
securityvulns
securityvulns
[ MDVSA-2015:087 ] egroupware
2015-05-12 00:00:00
ubuntucve
ubuntucve
CVE-2014-2027
2015-03-31 00:00:00
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.4%
Related for MGASA-2014-0116