CVE-2007-2171

EPSS 34.87%
Veröffentlicht 24.04.2007 20:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Novell ≫ Groupwise Version7.0

Novell ≫ Groupwise Version7.0 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	34.87%	0.966

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://download.novell.com/Download?buildid=8RF83go0nZg~

Patch

http://download.novell.com/Download?buildid=O9ucpbS1bK0~

Patch

http://secunia.com/advisories/24944

Vendor Advisory

http://securityreason.com/securityalert/2610

http://www.securityfocus.com/archive/1/466212/100/0/threaded

http://www.securityfocus.com/bid/23556

http://www.securitytracker.com/id?1017932

http://www.vupen.com/english/advisories/2007/1455

http://www.zerodayinitiative.com/advisories/ZDI-07-015.html

https://nvd.nist.gov/vuln/detail/CVE-2007-2171

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2171

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2171

EUVD