CVE-2014-0037 The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer...
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the username."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zarafa | = 5.00 | No fix listed |
| zarafa | = 5.01 | No fix listed |
| zarafa | = 5.02 | No fix listed |
| zarafa | = 5.10 | No fix listed |
| zarafa | = 5.11 | No fix listed |
| zarafa | = 5.20 | No fix listed |
| zarafa | = 5.22 | No fix listed |
| zarafa | = 6.00 | No fix listed |
| zarafa | = 6.01 | No fix listed |
| zarafa | = 6.02 | No fix listed |
| zarafa | = 6.03 | No fix listed |
| zarafa | = 6.10 | No fix listed |
| zarafa | = 6.11 | No fix listed |
| zarafa | = 6.20 | No fix listed |
| zarafa | = 6.20.2 | No fix listed |
| zarafa | = 6.20.3 | No fix listed |
| zarafa | = 6.20.5 | No fix listed |
| zarafa | = 6.20.6 | No fix listed |
| zarafa | = 6.20.7 | No fix listed |
| zarafa | = 6.20.10 | No fix listed |
| zarafa | = 6.20.11 | No fix listed |
| zarafa | = 6.20.12 | No fix listed |
| zarafa | = 6.30.0 | No fix listed |
| zarafa | = 6.30.3 | No fix listed |
| zarafa | = 6.30.4 | No fix listed |
Show 46 more
| Product | Affected versions | Fixed in |
|---|---|---|
| zarafa | = 6.30.5 | No fix listed |
| zarafa | = 6.30.6 | No fix listed |
| zarafa | = 6.30.7 | No fix listed |
| zarafa | = 6.30.8 | No fix listed |
| zarafa | = 6.30.9 | No fix listed |
| zarafa | = 6.30.10 | No fix listed |
| zarafa | = 6.30.11 | No fix listed |
| zarafa | = 6.30.13 | No fix listed |
| zarafa | = 6.30.16 | No fix listed |
| zarafa | = 6.30.17 | No fix listed |
| zarafa | = 6.40.0 | No fix listed |
| zarafa | = 6.40.2 | No fix listed |
| zarafa | = 6.40.3 | No fix listed |
| zarafa | = 6.40.4 | No fix listed |
| zarafa | = 6.40.5 | No fix listed |
| zarafa | = 6.40.6 | No fix listed |
| zarafa | = 6.40.7 | No fix listed |
| zarafa | = 6.40.8 | No fix listed |
| zarafa | = 6.40.9 | No fix listed |
| zarafa | = 6.40.10 | No fix listed |
| zarafa | = 6.40.11 | No fix listed |
| zarafa | = 6.40.12 | No fix listed |
| zarafa | = 6.40.13 | No fix listed |
| zarafa | = 6.40.14 | No fix listed |
| zarafa | = 6.40.15 | No fix listed |
| zarafa | = 6.40.16 | No fix listed |
| zarafa | = 6.40.17 | No fix listed |
| zarafa | = 7.0 | No fix listed |
| zarafa | = 7.0.1 | No fix listed |
| zarafa | = 7.0.2 | No fix listed |
| zarafa | = 7.0.3 | No fix listed |
| zarafa | = 7.0.4 | No fix listed |
| zarafa | = 7.0.5 | No fix listed |
| zarafa | = 7.0.6 | No fix listed |
| zarafa | = 7.0.7 | No fix listed |
| zarafa | = 7.0.8 | No fix listed |
| zarafa | = 7.0.9 | No fix listed |
| zarafa | = 7.0.10 | No fix listed |
| zarafa | = 7.0.11 | No fix listed |
| zarafa | = 7.0.12 | No fix listed |
| zarafa | = 7.0.13 | No fix listed |
| zarafa | = 7.1.0 | No fix listed |
| zarafa | = 7.1.1 | No fix listed |
| zarafa | = 7.1.2 | No fix listed |
| zarafa | = 7.1.3 | No fix listed |
| zarafa | = 7.1.4 | No fix listed |
References
- MDVSA-2014:044 vendor-advisory
- [oss-security] 20140131 Security Flaw CVE-2014-0037 mailing-list
- bugzilla.redhat.com
- bugzilla.redhat.com