CVE-2014-9465
published 2015-02-19CVE-2014-9465: senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1…
PriorityP425medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.36%
87.3th percentile
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp disk consumption) by uploading a large number of files.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| zarafa | webapp | <= 2.0 | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
| zarafa | zarafa_collaboration_platform | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
http://advisories.mageia.org/MGASA-2015-0049.htmlhttp://download.zarafa.com/community/beta/7.1/changelog-7.1.txthttp://download.zarafa.com/community/beta/7.2/changelog-7.2.txthttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/156112.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/156228.htmlhttp://security.robert-scheck.de/cve-2014-9465-zarafa/http://www.mandriva.com/security/advisories?name=MDVSA-2015:040http://www.openwall.com/lists/oss-security/2014/12/07/2http://www.openwall.com/lists/oss-security/2015/01/03/10https://bugzilla.redhat.com/show_bug.cgi?id=1139442https://jira.zarafa.com/browse/ZCP-12596http://advisories.mageia.org/MGASA-2015-0049.htmlhttp://download.zarafa.com/community/beta/7.1/changelog-7.1.txthttp://download.zarafa.com/community/beta/7.2/changelog-7.2.txthttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/156112.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/156228.htmlhttp://security.robert-scheck.de/cve-2014-9465-zarafa/http://www.mandriva.com/security/advisories?name=MDVSA-2015:040http://www.openwall.com/lists/oss-security/2014/12/07/2http://www.openwall.com/lists/oss-security/2015/01/03/10https://bugzilla.redhat.com/show_bug.cgi?id=1139442https://jira.zarafa.com/browse/ZCP-12596
2015-02-19
Published