Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8563
Reference (s):
- https://bugzilla.zimbra.com/show_bug.cgi?id=96105
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories