Lucene search
Gentoo FoundationMGASA-2014-0380HistorySep 22, 2014 - 12:31 p.m.
Updated zarafa packages fix multiple vulnerabilities
2014-09-2212:31:24
Gentoo Foundation
advisories.mageia.org
14
0.001 Low
EPSS
Percentile
47.3%
Updated zarafa packages fix security vulnerabilities: Robert Scheck reported that Zarafa’s WebAccess stored session information, including login credentials, on-disk in PHP session files. This session file would contain a user’s username and password to the Zarafa IMAP server (CVE-2014-0103). Robert Scheck discovered that the Zarafa Collaboration Platform has multiple incorrect default permissions (CVE-2014-5447, CVE-2014-5448, CVE-2014-5449, CVE-2014-5450).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | zarafa | <Â 7.1.11-1 | zarafa-7.1.11-1.mga3 |
| Mageia | 4 | noarch | zarafa | <Â 7.1.11-1 | zarafa-7.1.11-1.mga4 |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0380)
2022-01-28 00:00:00
Fedora Update for zarafa FEDORA-2014-9768
2014-09-03 00:00:00
Fedora Update for zarafa FEDORA-2014-9754
2014-08-31 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:182 ] zarafa
2014-10-14 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : zarafa (MDVSA-2014:182)
2014-09-25 00:00:00
Fedora 19 : zarafa-7.1.10-4.fc19 (2014-9768)
2014-09-03 00:00:00
Fedora 20 : zarafa-7.1.10-4.fc20 (2014-9754)
2014-08-30 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: zarafa-7.1.10-4.fc19
2014-09-02 06:45:25
[SECURITY] Fedora 20 Update: zarafa-7.1.10-4.fc20
2014-08-30 03:55:03
[SECURITY] Fedora 20 Update: zarafa-7.1.10-2.fc20
2014-07-28 03:24:40
prion
prion
Design/Logic Flaw
2014-10-20 15:55:00
Information disclosure
2018-03-19 21:29:00
Design/Logic Flaw
2014-10-20 15:55:00
ubuntucve
ubuntucve
cve
cve
cvelist
cvelist