10

CVE-2012-0271

Exploit
Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Novell ≫ Groupwise Version 8.0
Novell ≫ Groupwise Version 8.01
Novell ≫ Groupwise Version 8.01 Update hp
Novell ≫ Groupwise Version 8.02
Novell ≫ Groupwise Version 8.02 Update hp1
Novell ≫ Groupwise Version 8.02 Update hp2
Novell ≫ Groupwise Version 8.02 Update hp3
Novell ≫ Groupwise Version 8.03
Novell ≫ Groupwise Version 2012
Novell ≫ Groupwise Version 5.2
Novell ≫ Groupwise Version 5.5
Novell ≫ Groupwise Version 5.57e
Novell ≫ Groupwise Version 6.0
Novell ≫ Groupwise Version 6.0.1 Update sp1
Novell ≫ Groupwise Version 6.5
Novell ≫ Groupwise Version 6.5 Update sp1
Novell ≫ Groupwise Version 6.5 Update sp2
Novell ≫ Groupwise Version 6.5 Update sp3
Novell ≫ Groupwise Version 6.5 Update sp4
Novell ≫ Groupwise Version 6.5 Update sp5
Novell ≫ Groupwise Version 6.5 Update sp6
Novell ≫ Groupwise Version 6.5.2
Novell ≫ Groupwise Version 6.5.3
Novell ≫ Groupwise Version 6.5.4
Novell ≫ Groupwise Version 6.5.6
Novell ≫ Groupwise Version 6.5.7
Novell ≫ Groupwise Version 7.0
Novell ≫ Groupwise Version 7.0.3 Update hp4
Novell ≫ Groupwise Version 7.0.3 Update hp5
Novell ≫ Groupwise Version 7.0.4
Novell ≫ Groupwise Version 7.0.4 Update ftf
Novell ≫ Groupwise Version 7.01
Novell ≫ Groupwise Version 7.01 Update ir1
Novell ≫ Groupwise Version 7.02
Novell ≫ Groupwise Version 7.02 Update hp1
Novell ≫ Groupwise Version 7.02 Update hp1a
Novell ≫ Groupwise Version 7.02 Update hp2
Novell ≫ Groupwise Version 7.02 Update hp2r1
Novell ≫ Groupwise Version 7.03
Novell ≫ Groupwise Version 7.03 Update hp
Novell ≫ Groupwise Version 7.03 Update hp2
Novell ≫ Groupwise Version 7.03 Update hp3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 17.23% 0.967
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://osvdb.org/85426
http://www.novell.com/support/kb/doc.php?id=7010769
Vendor Advisory
http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=61&Itemid=61
Exploit
https://bugzilla.novell.com/show_bug.cgi?id=746199