CVE

Id
72746  
CVE No.
CVE-2014-5448  
Status
Candidate  
Description
Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.  
Phase
Assigned (20140825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
685515 72746 CVE-2014-5448 MLIST:[oss-security] 20140824 CVE request: Multiple incorrect default permissions in Zarafa  View
685516 72746 CVE-2014-5448 URL:http://seclists.org/oss-sec/2014/q3/444  View
685517 72746 CVE-2014-5448 MLIST:[oss-security] 20140825 Re: CVE request: Multiple incorrect default permissions in Zarafa  View
685518 72746 CVE-2014-5448 URL:http://seclists.org/oss-sec/2014/q3/445  View
685519 72746 CVE-2014-5448 CONFIRM:http://advisories.mageia.org/MGASA-2014-0380.html  View
685520 72746 CVE-2014-5448 MANDRIVA:MDVSA-2014:182  View
685521 72746 CVE-2014-5448 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2014:182  View
685522 72746 CVE-2014-5448 BID:69365  View
685523 72746 CVE-2014-5448 URL:http://www.securityfocus.com/bid/69365  View
685524 72746 CVE-2014-5448 XF:zarafa-logzarafa-info-disc(95452)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15066 JVNDB-2014-003941 Drupal 用 Social Stats モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Social Stats モジュールには、設定に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-5456 72746 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003941.html  View