176 matches found
CVE-2014-0079
The CVE-2014-0079 issue affects Zarafa’s ValidateUserLogon path in provider/libserver/ECSession.cpp, enabling remote denial of service (crash) via a NULL password pointer. Affected products/versions identified in sources include Zarafa 7.1.8, 6.20.0 and earlier. Public disclosures and advisories ...
CVE-2014-0037: Improper Input Validation
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service crash via vectors related to "a NULL pointer of the username."...
CVE-2014-0079: Improper Input Validation
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service crash via vectors related to "a NULL pointer of the password."...
Updated zarafa packages fix security vulnerabilities
Robert Scheck discovered multiple vulnerabilities in Zarafa that could allow a remote unauthenticated attacker to crash the zarafa-server daemon, preventing access to any other legitimate Zarafa users CVE-2014-0037, CVE-2014-0079...
MGASA-2014-0112 Updated zarafa packages fix security vulnerabilities
Robert Scheck discovered multiple vulnerabilities in Zarafa that could allow a remote unauthenticated attacker to crash the zarafa-server daemon, preventing access to any other legitimate Zarafa users CVE-2014-0037, CVE-2014-0079...
PT-2014-3445
Name of the Vulnerable Software and Affected Versions Zarafa versions 5.00 through 7.1.8 beta1 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is related to a NULL pointer of the username variable in the ValidateUserLogon function...
PT-2014-3467
Name of the Vulnerable Software and Affected Versions Zarafa versions 7.1.8 and earlier, 6.20.0 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is related to a NULL pointer of the password variable in the ValidateUserLogon functio...
Mandriva Linux Security Advisory : zarafa (MDVSA-2014:044)
Robert Scheck discovered multiple vulnerabilities in Zarafa that could allow a remote unauthenticated attacker to crash the zarafa-server daemon, preventing access to any other legitimate Zarafa users CVE-2014-0037, CVE-2014-0079. The updated packages have been upgraded to the 7.1.8 version which...
Fedora 20 : zarafa-7.1.8-1.fc20 (2014-1900)
Zarafa Collaboration Platform 7.1.8 final 43801 ================================================= Backend Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...
Fedora 19 : zarafa-7.1.8-1.fc19 (2014-1883)
Zarafa Collaboration Platform 7.1.8 final 43801 ================================================= Backend Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...
Fedora Update for zarafa FEDORA-2014-1900
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for zarafa FEDORA-2014-1883
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for zarafa FEDORA-2014-1900
Check for the Version of zarafa OpenVAS Vulnerability Test Fedora Update for zarafa FEDORA-2014-1900 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for zarafa FEDORA-2014-1883
Check for the Version of zarafa OpenVAS Vulnerability Test Fedora Update for zarafa FEDORA-2014-1883 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 19 Update: zarafa-7.1.8-1.fc19
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...
[SECURITY] Fedora 20 Update: zarafa-7.1.8-1.fc20
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...