Launchpad.net

CVE 2014-5448

Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files.

See the CVE page on Mitre.org for more details.