CVE-2014-9465 senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denia...
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp disk consumption) by uploading a large number of files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject fedora | = 20 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| zarafa webapp | <= 2.0 | No fix listed |
| zarafa collaboration platform | = 7.0.0 | No fix listed |
| zarafa collaboration platform | = 7.0.1 | No fix listed |
| zarafa collaboration platform | = 7.0.2 | No fix listed |
| zarafa collaboration platform | = 7.0.3 | No fix listed |
| zarafa collaboration platform | = 7.0.4 | No fix listed |
| zarafa collaboration platform | = 7.0.5 | No fix listed |
| zarafa collaboration platform | = 7.0.6 | No fix listed |
| zarafa collaboration platform | = 7.0.7 | No fix listed |
| zarafa collaboration platform | = 7.0.8 | No fix listed |
| zarafa collaboration platform | = 7.0.9 | No fix listed |
| zarafa collaboration platform | = 7.0.10 | No fix listed |
| zarafa collaboration platform | = 7.0.11 | No fix listed |
| zarafa collaboration platform | = 7.0.12 | No fix listed |
| zarafa collaboration platform | = 7.0.13 | No fix listed |
| zarafa collaboration platform | = 7.1.0 | No fix listed |
| zarafa collaboration platform | = 7.1.1 | No fix listed |
| zarafa collaboration platform | = 7.1.2 | No fix listed |
| zarafa collaboration platform | = 7.1.3 | No fix listed |
| zarafa collaboration platform | = 7.1.4 | No fix listed |
| zarafa collaboration platform | = 7.1.5 | No fix listed |
| zarafa collaboration platform | = 7.1.6 | No fix listed |
| zarafa collaboration platform | = 7.1.7 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| zarafa collaboration platform | = 7.1.8 | No fix listed |
| zarafa collaboration platform | = 7.1.9 | No fix listed |
| zarafa collaboration platform | = 7.1.10 | No fix listed |
| zarafa collaboration platform | = 7.1.11 | No fix listed |
References
- advisories.mageia.org
- download.zarafa.com vendor-advisory
- download.zarafa.com vendor-advisory
- FEDORA-2015-5823 vendor-advisory
- FEDORA-2015-5864 vendor-advisory
- security.robert-scheck.de exploit
- MDVSA-2015:040 vendor-advisory
- [oss-security] 20141207 CVE request: Unauthenticated remote disk space exhaustion in Zarafa WebAccess and WebApp mailing-list
- [oss-security] 20150103 Re: CVE request: Unauthenticated remote disk space exhaustion in Zarafa WebAccess and WebApp mailing-list
- bugzilla.redhat.com
- jira.zarafa.com