CVE-2007-2171

EPSS 34.87%
Published 24.04.2007 20:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Novell ≫ Groupwise Version7.0

Novell ≫ Groupwise Version7.0 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	34.87%	0.966

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://download.novell.com/Download?buildid=8RF83go0nZg~

Patch

http://download.novell.com/Download?buildid=O9ucpbS1bK0~

Patch

http://secunia.com/advisories/24944

Vendor Advisory

http://securityreason.com/securityalert/2610

http://www.securityfocus.com/archive/1/466212/100/0/threaded

http://www.securityfocus.com/bid/23556

http://www.securitytracker.com/id?1017932

http://www.vupen.com/english/advisories/2007/1455

http://www.zerodayinitiative.com/advisories/ZDI-07-015.html

https://nvd.nist.gov/vuln/detail/CVE-2007-2171

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2171

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2171

EUVD