Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-0079

The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.5%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2014-0079
  • Zarafa » Zarafa » Version: 5.00
    cpe:2.3:a:zarafa:zarafa:5.00
  • Zarafa » Zarafa » Version: 5.01
    cpe:2.3:a:zarafa:zarafa:5.01
  • Zarafa » Zarafa » Version: 5.02
    cpe:2.3:a:zarafa:zarafa:5.02
  • Zarafa » Zarafa » Version: 5.10
    cpe:2.3:a:zarafa:zarafa:5.10
  • Zarafa » Zarafa » Version: 5.11
    cpe:2.3:a:zarafa:zarafa:5.11
  • Zarafa » Zarafa » Version: 5.20
    cpe:2.3:a:zarafa:zarafa:5.20
  • Zarafa » Zarafa » Version: 5.22
    cpe:2.3:a:zarafa:zarafa:5.22
  • Zarafa » Zarafa » Version: 6.00
    cpe:2.3:a:zarafa:zarafa:6.00
  • Zarafa » Zarafa » Version: 6.01
    cpe:2.3:a:zarafa:zarafa:6.01
  • Zarafa » Zarafa » Version: 6.02
    cpe:2.3:a:zarafa:zarafa:6.02
  • Zarafa » Zarafa » Version: 6.03
    cpe:2.3:a:zarafa:zarafa:6.03
  • Zarafa » Zarafa » Version: 6.10
    cpe:2.3:a:zarafa:zarafa:6.10
  • Zarafa » Zarafa » Version: 6.11
    cpe:2.3:a:zarafa:zarafa:6.11
  • Zarafa » Zarafa » Version: 6.20
    cpe:2.3:a:zarafa:zarafa:6.20
  • Zarafa » Zarafa » Version: 7.1.8
    cpe:2.3:a:zarafa:zarafa:7.1.8


Products
Pricing
Contact Us

Shodan ® - All rights reserved