low3.5
CVE-2013-6003
CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbit…
Impact
CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Garoon | Versions 3.1, 3.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://cs.cybozu.co.jp/information/20131202up01.php
- http://jvn.jp/en/jp/JVN84221103/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000116
- https://support.cybozu.com/ja-jp/article/6121
- http://cs.cybozu.co.jp/information/20131202up01.php
- http://jvn.jp/en/jp/JVN84221103/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000116
- https://support.cybozu.com/ja-jp/article/6121