| Package | Affected versions | Patched versions |
|---|---|---|
| zarafa | = 5.00= 5.01= 5.02= 5.10= 5.11= 5.20= 5.22= 6.00= 6.01= 6.02= 6.03= 6.10= 6.11= 7.1.8≤ 6.20 |
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free