zarafa-autorespond Privilege Escalation

The vulnerability of the zarafa-autorespond application, which is part of the Zarafa Collaboration Platform, is related to incorrect definition of links before accessing a file. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges by manipulating...

Zarafa Collaboration Platform zarafa-autorespond Privilege Gain Vulnerability

Zarafa Collaboration Platform ZCP is a suite of open source email and calendar software from Zarafa, Netherlands. A security vulnerability exists in zarafa-autorespond in versions of ZCP prior to 7.2.1. A local attacker can exploit this vulnerability to gain privileges by performing a symbolic li...

PT-2016-1059

Name of the Vulnerable Software and Affected Versions Zarafa Collaboration Platform versions prior to 7.2.1 Description The issue is related to incorrect link resolution before file access in the zarafa-autorespond application, part of the Zarafa Collaboration Platform. This can be exploited by a...

CVE-2015-6566: Improper Link Resolution Before File Access

zarafa-autorespond in Zarafa Collaboration Platform ZCP before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-...