CVE-2014-8563 – Synacor Zimbra Collaboration before 8.0.9 allows plaintext command inject

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8563

Reference (s):

• https://bugzilla.zimbra.com/show_bug.cgi?id=96105
• https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories