Fedora 21 : zarafa-7.1.14-1.fc21 (2015-a275fd68f2)

Zarafa Collaboration Platform 7.1.14 final 51822 ================================================== - ZCP-13581: update fck- editor for webaccess to solve CVE-2012-4000 - ZCP-13572: CVE-2015-6566 - zarafa-autorespond suffers from a potential local privilege escalation - ZCP-13087: Meeting request...

CVE-2015-6566

Zarafa Autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 is vulnerable to a local privilege escalation via a symlink attack on /tmp/zarafa-vacation-*. The issue affects the zarafa-autorespond component and can allow a local attacker to gain privileges. The CVE-2015-6566 entry identi...