CVE

Id
72747  
CVE No.
CVE-2014-5449  
Status
Candidate  
Description
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data.  
Phase
Assigned (20140825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
685525 72747 CVE-2014-5449 MLIST:[oss-security] 20140824 CVE request: Multiple incorrect default permissions in Zarafa  View
685526 72747 CVE-2014-5449 URL:http://seclists.org/oss-sec/2014/q3/444  View
685527 72747 CVE-2014-5449 MLIST:[oss-security] 20140825 Re: CVE request: Multiple incorrect default permissions in Zarafa  View
685528 72747 CVE-2014-5449 URL:http://seclists.org/oss-sec/2014/q3/445  View
685529 72747 CVE-2014-5449 CONFIRM:http://advisories.mageia.org/MGASA-2014-0380.html  View
685530 72747 CVE-2014-5449 MANDRIVA:MDVSA-2014:182  View
685531 72747 CVE-2014-5449 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2014:182  View
685532 72747 CVE-2014-5449 BID:69369  View
685533 72747 CVE-2014-5449 URL:http://www.securityfocus.com/bid/69369  View
685534 72747 CVE-2014-5449 XF:webaccess-webapp-information-disc(95453)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15074 JVNDB-2014-003949 複数の QNAP 製品のファームウェアにおけるユーザ名およびハッシュ化されたパスワードを取得される脆弱性 QNAP TS-469U、TS-459U、TS-EC1679U-RP、および SS-839 のファームウェアは、/etc/config/shadow に誰でも読み取り可能な権限 (world-readable permission) を使用するため、ユーザ名およびハッシュ化されたパスワードを取得される脆弱性が存在します。 CVE-2014-5457 72747 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003949.html  View