CVE-2014-0079

Published Apr 28, 2014 CVSS 2.0 · 5.0 Medium EPSS 1.8% KEV · Not listed
Description
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-0171 The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the password."
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 9:05 AM
Reserved
Dec 3, 2013, 12:00 AM
Status
Modified
Published
Apr 28, 2014, 2:09 PM
Modified
Jun 17, 2026, 12:02 AM