What is the severity of CVE-2024-27442?

CVE-2024-27442 has a critical severity level due to its potential for privilege escalation from the zimbra user to root.

How do I fix CVE-2024-27442?

To mitigate CVE-2024-27442, update Zimbra Collaboration to version 10.0.8 or 9.0.0-p40 or later releases that address this vulnerability.

Which versions of Zimbra Collaboration are affected by CVE-2024-27442?

CVE-2024-27442 affects Zimbra Collaboration versions 9.0.0 through 10.0.7.

What component is responsible for the CVE-2024-27442 vulnerability?

The vulnerability in CVE-2024-27442 is found in the zmmailboxdmgr binary of Zimbra Collaboration.

What is the potential impact of CVE-2024-27442?

CVE-2024-27442 allows attackers to escalate privileges, potentially leading to unauthorized root access and full control over the system.

Vulnerability/
CVE-2024-27442

high

7.8

CWE

755 269

12/8/2024

13/8/2024

CVE-2024-27442

First published: Mon Aug 12 2024(Updated: )

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The zmmailboxdmgr binary, a component of ZCS, is intended to be executed by the zimbra user with root privileges for specific mailbox operations. However, an attacker can escalate privileges from the zimbra user to root, because of improper handling of input arguments. An attacker can execute arbitrary commands with elevated privileges, leading to local privilege escalation.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Zimbra Collaboration	>=10.0.0<10.0.7
Zimbra Collaboration	=9.0.0
Zimbra Collaboration	=9.0.0-p0
Zimbra Collaboration	=9.0.0-p1
Zimbra Collaboration	=9.0.0-p10
Zimbra Collaboration	=9.0.0-p11
Zimbra Collaboration	=9.0.0-p12
Zimbra Collaboration	=9.0.0-p13
Zimbra Collaboration	=9.0.0-p14
Zimbra Collaboration	=9.0.0-p15
Zimbra Collaboration	=9.0.0-p16
Zimbra Collaboration	=9.0.0-p19
Zimbra Collaboration	=9.0.0-p2
Zimbra Collaboration	=9.0.0-p20
Zimbra Collaboration	=9.0.0-p21
Zimbra Collaboration	=9.0.0-p23
Zimbra Collaboration	=9.0.0-p24
Zimbra Collaboration	=9.0.0-p24.1
Zimbra Collaboration	=9.0.0-p25
Zimbra Collaboration	=9.0.0-p26
Zimbra Collaboration	=9.0.0-p27
Zimbra Collaboration	=9.0.0-p3
Zimbra Collaboration	=9.0.0-p30
Zimbra Collaboration	=9.0.0-p31
Zimbra Collaboration	=9.0.0-p32
Zimbra Collaboration	=9.0.0-p33
Zimbra Collaboration	=9.0.0-p34
Zimbra Collaboration	=9.0.0-p35
Zimbra Collaboration	=9.0.0-p36
Zimbra Collaboration	=9.0.0-p37
Zimbra Collaboration	=9.0.0-p38
Zimbra Collaboration	=9.0.0-p4
Zimbra Collaboration	=9.0.0-p5
Zimbra Collaboration	=9.0.0-p6
Zimbra Collaboration	=9.0.0-p7
Zimbra Collaboration	=9.0.0-p7.1
Zimbra Collaboration	=9.0.0-p8
Zimbra Collaboration	=9.0.0-p9

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-27442?
CVE-2024-27442 has a critical severity level due to its potential for privilege escalation from the zimbra user to root.
How do I fix CVE-2024-27442?
To mitigate CVE-2024-27442, update Zimbra Collaboration to version 10.0.8 or 9.0.0-p40 or later releases that address this vulnerability.
Which versions of Zimbra Collaboration are affected by CVE-2024-27442?
CVE-2024-27442 affects Zimbra Collaboration versions 9.0.0 through 10.0.7.
What component is responsible for the CVE-2024-27442 vulnerability?
The vulnerability in CVE-2024-27442 is found in the zmmailboxdmgr binary of Zimbra Collaboration.
What is the potential impact of CVE-2024-27442?
CVE-2024-27442 allows attackers to escalate privileges, potentially leading to unauthorized root access and full control over the system.

agent/references
agent/description
agent/type
agent/first-publish-date
agent/author
agent/severity
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/last-modified-date
agent/weakness
agent/softwarecombine
agent/tags
collector/mitre-cve
source/MITRE
agent/source
vendor/zimbra
canonical/zimbra collaboration
version/zimbra collaboration/10.0.0
version/zimbra collaboration/9.0.0
version/zimbra collaboration/9.0.0-p0
version/zimbra collaboration/9.0.0-p1
version/zimbra collaboration/9.0.0-p10
version/zimbra collaboration/9.0.0-p11
version/zimbra collaboration/9.0.0-p12
version/zimbra collaboration/9.0.0-p13
version/zimbra collaboration/9.0.0-p14
version/zimbra collaboration/9.0.0-p15
version/zimbra collaboration/9.0.0-p16
version/zimbra collaboration/9.0.0-p19
version/zimbra collaboration/9.0.0-p2
version/zimbra collaboration/9.0.0-p20
version/zimbra collaboration/9.0.0-p21
version/zimbra collaboration/9.0.0-p23
version/zimbra collaboration/9.0.0-p24
version/zimbra collaboration/9.0.0-p24.1
version/zimbra collaboration/9.0.0-p25
version/zimbra collaboration/9.0.0-p26
version/zimbra collaboration/9.0.0-p27
version/zimbra collaboration/9.0.0-p3
version/zimbra collaboration/9.0.0-p30
version/zimbra collaboration/9.0.0-p31
version/zimbra collaboration/9.0.0-p32
version/zimbra collaboration/9.0.0-p33
version/zimbra collaboration/9.0.0-p34
version/zimbra collaboration/9.0.0-p35
version/zimbra collaboration/9.0.0-p36
version/zimbra collaboration/9.0.0-p37
version/zimbra collaboration/9.0.0-p38
version/zimbra collaboration/9.0.0-p4
version/zimbra collaboration/9.0.0-p5
version/zimbra collaboration/9.0.0-p6
version/zimbra collaboration/9.0.0-p7
version/zimbra collaboration/9.0.0-p7.1
version/zimbra collaboration/9.0.0-p8
version/zimbra collaboration/9.0.0-p9

Frequently Asked Questions

What is the severity of CVE-2024-27442?
CVE-2024-27442 has a critical severity level due to its potential for privilege escalation from the zimbra user to root.
How do I fix CVE-2024-27442?
To mitigate CVE-2024-27442, update Zimbra Collaboration to version 10.0.8 or 9.0.0-p40 or later releases that address this vulnerability.
Which versions of Zimbra Collaboration are affected by CVE-2024-27442?
CVE-2024-27442 affects Zimbra Collaboration versions 9.0.0 through 10.0.7.
What component is responsible for the CVE-2024-27442 vulnerability?
The vulnerability in CVE-2024-27442 is found in the zmmailboxdmgr binary of Zimbra Collaboration.
What is the potential impact of CVE-2024-27442?
CVE-2024-27442 allows attackers to escalate privileges, potentially leading to unauthorized root access and full control over the system.

CVE-2024-27442

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-27442?

How do I fix CVE-2024-27442?

Which versions of Zimbra Collaboration are affected by CVE-2024-27442?

What component is responsible for the CVE-2024-27442 vulnerability?

What is the potential impact of CVE-2024-27442?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2024-27442?

How do I fix CVE-2024-27442?

Which versions of Zimbra Collaboration are affected by CVE-2024-27442?

What component is responsible for the CVE-2024-27442 vulnerability?

What is the potential impact of CVE-2024-27442?