Cybozu Garoon CVE-2014-1988 Denial of Service Vulnerability

Bugtraq ID:	67332
Class:	Input Validation Error
CVE:	CVE-2014-1988
Remote:	Yes
Local:	No
Published:	Apr 30 2014 12:00AM
Updated:	Apr 30 2014 12:00AM
Credit:	Cybozu
Vulnerable:	Cybozu Garoon 3.7.2 Cybozu Garoon 3.7.1 Cybozu Garoon 3.0 Cybozu Garoon 2.1.3 Cybozu Garoon 2.1.1 Cybozu Garoon 2.1 Cybozu Garoon 2.0.5 Cybozu Garoon 2.0.4 Cybozu Garoon 2.0.3 Cybozu Garoon 2.0.2 Cybozu Garoon 2.0.1 Cybozu Garoon 3.7.0 Cybozu Garoon 3.5.5 Cybozu Garoon 3.5.4 Cybozu Garoon 3.5.3 Cybozu Garoon 3.5.2 Cybozu Garoon 3.5.1 Cybozu Garoon 3.5.0 Cybozu Garoon 3.1.3 Cybozu Garoon 3.1.2 Cybozu Garoon 3.1.1 Cybozu Garoon 3.1.0 Cybozu Garoon 3.0.3 Cybozu Garoon 3.0.2 Cybozu Garoon 3.0.1 Cybozu Garoon 2.5.4 Cybozu Garoon 2.5.3 Cybozu Garoon 2.5.2 Cybozu Garoon 2.5.1 Cybozu Garoon 2.5.0 Cybozu Garoon 2.1.2 Cybozu Garoon 2.0.6 Cybozu Garoon 2.0.0
Not Vulnerable:	Cybozu Garoon 3.7.3

Cybozu Garoon CVE-2014-1988 Denial of Service Vulnerability

Cybozu Garoon is prone to a denial-of-service vulnerability.

Remote attackers can exploit this issue to cause denial-of-service conditions for legitimate users.

Cybozu Garoon 2.0.0 through 3.7.2 are vulnerable.

Cybozu Garoon CVE-2014-1988 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of any recent information, please mail us at: [email protected].

Cybozu Garoon CVE-2014-1988 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cybozu Garoon CVE-2014-1988 Denial of Service Vulnerability

References:

• Cybozu Garoon Download page (Cybozu)
  
• Cybozu Denial of Service Advisory (Cybozu)
  
• JVN#90519014 Cybozu Garoon Phone Messages vulnerable to denial-of-service (DoS) (JPCERT)