CVE-2014-9465
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration...
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp disk consumption) by uploading a large number of files.
Exploit likelihood
What each source reports
NVD Score used
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp disk consumption) by uploading a large number of files.
- Record
CVE-2014-9465- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp disk consumption) by uploading a large number of files.
- Record
CVE-2014-9465- Updated
- 2026-11-02
EUVDEUVD-2014-9284 No score
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp disk consumption) by uploading a large number of files.
- Record
EUVD-2014-9284- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-54r8-748f-4vmf No score
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration...
senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service (/tmp disk consumption) by uploading a large number of files.
- Record
GHSA-54r8-748f-4vmf- Updated
- 2026-11-02
OSVMGASA-2015-0049 No score
Updated zarafa packages fix CVE-2014-9465 and some packaging issues
Updated zarafa packages fix security vulnerability:
Robert Scheck discovered a flaw in Zarafa WebAccess >= 7.0.0 and Zarafa WebApp that could allow a remote unauthenticated attacker to exhaust the disk space of /tmp (CVE-2014-9465).
This update also adds some patches from Robert Scheck which correct some packaging issues with zarafa-webaccess.
- Record
MGASA-2015-0049- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
zarafaMageia:4 |
before 7.1.11-1.2.mga4 | 7.1.11-1.2.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-9465 is a medium vulnerability (CVSS 5.0) in Zarafa Webapp, published February 5, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.36%, the 88th percentile. Fixed in zarafa 7.1.11-1.2.mga4.
References
mandriva.com/security/advisories?name=MDVSA-2015:040
download.zarafa.com/community/beta/7.1/changelog-7.1.txt
openwall.com/lists/oss-security/2015/01/03/10
jira.zarafa.com/browse/ZCP-12596
lists.fedoraproject.org/pipermail/package-announce/2015-April/156228.html
security.robert-scheck.de/cve-2014-9465-zarafa
Show 8 moreShow less
advisories.mageia.org/MGASA-2015-0049.html
bugzilla.redhat.com/show_bug.cgi?id=1139442
nvd.nist.gov/vuln/detail/CVE-2014-9465
github.com/advisories/GHSA-54r8-748f-4vmf
bugs.mageia.org/show_bug.cgi?id=14993