CVE-2014-0079
28.04.2014, 14:09
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password."Enginsight
| Vendor | Product | Version |
|---|---|---|
| zarafa | zarafa | 𝑥 ≤ 6.20 |
| zarafa | zarafa | 5.00 |
| zarafa | zarafa | 5.01 |
| zarafa | zarafa | 5.02 |
| zarafa | zarafa | 5.10 |
| zarafa | zarafa | 5.11 |
| zarafa | zarafa | 5.20 |
| zarafa | zarafa | 5.22 |
| zarafa | zarafa | 6.00 |
| zarafa | zarafa | 6.01 |
| zarafa | zarafa | 6.02 |
| zarafa | zarafa | 6.03 |
| zarafa | zarafa | 6.10 |
| zarafa | zarafa | 6.11 |
| zarafa | zarafa | 7.1.8 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration