CVEvulnerability

CVE-2014-0037

5.0 MEDIUM Published 2014-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the username."

Affected configurations

• zarafa zarafa 5.00 • zarafa zarafa 5.01 • zarafa zarafa 5.02 • zarafa zarafa 5.10 • zarafa zarafa 5.11 • zarafa zarafa 5.20 • zarafa zarafa 5.22 • zarafa zarafa 6.00 • zarafa zarafa 6.01 • zarafa zarafa 6.02 • zarafa zarafa 6.03 • zarafa zarafa 6.10 • zarafa zarafa 6.11 • zarafa zarafa 6.20 • zarafa zarafa 6.20.2 • zarafa zarafa 6.20.3 • zarafa zarafa 6.20.5 • zarafa zarafa 6.20.6 • zarafa zarafa 6.20.7 • zarafa zarafa 6.20.10 • zarafa zarafa 6.20.11 • zarafa zarafa 6.20.12 • zarafa zarafa 6.30.0 • zarafa zarafa 6.30.3 • zarafa zarafa 6.30.4 • zarafa zarafa 6.30.5 • zarafa zarafa 6.30.6 • zarafa zarafa 6.30.7 • zarafa zarafa 6.30.8 • zarafa zarafa 6.30.9 • zarafa zarafa 6.30.10 • zarafa zarafa 6.30.11 • zarafa zarafa 6.30.13 • zarafa zarafa 6.30.16 • zarafa zarafa 6.30.17 • zarafa zarafa 6.40.0 • zarafa zarafa 6.40.2 • zarafa zarafa 6.40.3 • zarafa zarafa 6.40.4 • zarafa zarafa 6.40.5 • zarafa zarafa 6.40.6 • zarafa zarafa 6.40.7 • zarafa zarafa 6.40.8 • zarafa zarafa 6.40.9 • zarafa zarafa 6.40.10 • zarafa zarafa 6.40.11 • zarafa zarafa 6.40.12 • zarafa zarafa 6.40.13 • zarafa zarafa 6.40.14 • zarafa zarafa 6.40.15 • zarafa zarafa 6.40.16 • zarafa zarafa 6.40.17 • zarafa zarafa 7.0 • zarafa zarafa 7.0.1 • zarafa zarafa 7.0.2 • zarafa zarafa 7.0.3 • zarafa zarafa 7.0.4 • zarafa zarafa 7.0.5 • zarafa zarafa 7.0.6 • zarafa zarafa 7.0.7 … and 11 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References