CVE-2014-0037

概要

参考情報

• mandriva.com/security/advisories
• openwall.com/lists/oss-security/2014/01/31/14
• bugzilla.redhat.com/show_bug.cgi
• bugzilla.redhat.com/show_bug.cgi

zarafa のその他の脆弱性

• CVE-2021-28994高 7.5kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 …
• CVE-2014-5448低 2.1Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by …
• CVE-2014-5447低 2.1Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive informa…
• CVE-2014-0103低 2.1WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive…
• CVE-2014-0079中 5.0The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions…