« Volver al listado

CVE-2014-0079

Estado: ModificadaMedia (5)—

The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Zarafa — Zarafa

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0079",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-04-28T14:09:06.157",
  "references": [
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:044",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1059903",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:044",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1059903",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to \"a NULL pointer of the password.\""
    },
    {
      "lang": "es",
      "value": "La función ValidateUserLogon en provider/libserver/ECSession.cpp en Zarafa 7.1.8, 6.20.0 y anteriores, cuando utiliza ciertas condiciones build, permite a atacantes remotos causar una denegación de servicio (caída) a través de vectores relacionados con \"un puntero nulo de la contraseña.\""
    }
  ],
  "lastModified": "2026-06-17T00:02:13.307",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9229E5C7-1B90-4EF9-B25C-3FD16DE7D9CD",
              "versionEndIncluding": "6.20"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:5.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DFE4F63-2078-480A-B72A-3DE33CDC344B"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:5.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F94B071-7F2E-43FE-97CA-4D197C974113"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:5.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49C995CA-336C-4A1C-823D-9EBA045AD1F2"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:5.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58078592-63A0-4B33-9B0C-7746BC1447AE"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:5.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E49A5667-0871-41DC-9EB6-FA023F0ED09B"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:5.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "984D2E0A-5BA5-421B-84C3-679A78DB635F"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:5.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3250F9C2-3C5B-4E68-A16E-2708821C27D9"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:6.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "423607B2-4333-490F-9C85-FFB839B62FE3"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:6.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "538BEF9A-0FDA-4C89-A4C6-09B3800A5D50"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:6.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B81A4C9-9722-4F6F-A622-C906EE6032E1"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:6.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6AF323B-28EF-4682-91E6-F63CBE31EBF4"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:6.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8E76A6A-ED91-453B-BE25-A05A9AEEB09D"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:6.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BDBB142-6537-4E04-9217-6855CADB70C8"
            },
            {
              "criteria": "cpe:2.3:a:zarafa:zarafa:7.1.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF0735C7-4626-40F9-BD84-970C120FFA09"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}