CVE-2014-0037

Published Apr 28, 2014 CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
Description
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the username."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-0134 The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the username."
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 8:58 AM
Reserved
Dec 3, 2013, 12:00 AM
Status
Modified
Published
Apr 28, 2014, 2:09 PM
Modified
Jun 17, 2026, 12:02 AM