GCVE-110-MAGEIA-2015-49

Advisory Published

Vulnetix · Advisory published February 5, 2015

Updated zarafa packages fix security vulnerability: Robert Scheck discovered a flaw in Zarafa WebAccess >= 7.0.0 and Zarafa WebApp that could allow a remote unauthenticated attacker to exhaust the disk space of /tmp (CVE-2014-9465). This update also adds some patches from Robert Scheck which correct some packaging issues with zarafa-webaccess.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	zarafa	0 (affected), 7.1.11-1.2.mga4 (unaffected)	—

References

Updated zarafa packages fix CVE-2014-9465 and some packaging issues

advisory

Updated zarafa packages fix CVE-2014-9465 and some packaging issues

issue

Updated zarafa packages fix CVE-2014-9465 and some packaging issues

url

Updated zarafa packages fix CVE-2014-9465 and some packaging issues

url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON