Zarafa · Zarafa Collaboration Platform · CVE-2014-9465
**Name of the Vulnerable Software and Affected Versions**
Zarafa WebApp versions prior to 2.0 beta 3
Zarafa Collaboration Platform (ZCP) versions 7.0.x through 7.1.11 and 7.2.x prior to 7.2.0 beta 1
**Description**
The issue allows remote attackers to cause a denial of service by consuming disk space in /tmp through the upload of a large number of files. This is related to the senddocument.php file in Zarafa WebApp and WebAccess in Zarafa Collaboration Platform.
**Recommendations**
For Zarafa WebApp versions prior to 2.0 beta 3, update to version 2.0 beta 3 or later.
For Zarafa Collaboration Platform (ZCP) versions 7.0.x through 7.1.11, update to version 7.1.12 beta 1 or later.
For Zarafa Collaboration Platform (ZCP) versions 7.2.x prior to 7.2.0 beta 1, update to version 7.2.0 beta 1 or later.