CVE-2015-6566: High severity zarafa collaboration platform vulnerability
Published Jan 11, 2016
·Updated
zarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-.
Affected Software
2 affected components
Zarafa Zarafa Collaboration Platform<=7.2.0
Fedoraproject Fedora=21
Event History
Jan 11, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6566?
CVE-2015-6566 is classified as a high-severity vulnerability due to the potential for privilege escalation.
2
How do I fix CVE-2015-6566?
To fix CVE-2015-6566, upgrade Zarafa Collaboration Platform to version 7.2.1 or later.
3
What systems are affected by CVE-2015-6566?
CVE-2015-6566 affects Zarafa Collaboration Platform versions prior to 7.2.1 and Fedora 21.
4
What is a symlink attack in the context of CVE-2015-6566?
In the context of CVE-2015-6566, a symlink attack allows local users to manipulate file permissions and escalate privileges.
5
Can CVE-2015-6566 be exploited remotely?
CVE-2015-6566 is a local vulnerability that requires access to the system to be exploited.