10

CVE-2012-0271

Exploit

Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.

Data is provided by the National Vulnerability Database (NVD)
NovellGroupwise Version8.0
NovellGroupwise Version8.01
NovellGroupwise Version8.01 Updatehp
NovellGroupwise Version8.02
NovellGroupwise Version8.02 Updatehp1
NovellGroupwise Version8.02 Updatehp2
NovellGroupwise Version8.02 Updatehp3
NovellGroupwise Version8.03
NovellGroupwise Version2012
NovellGroupwise Version5.2
NovellGroupwise Version5.5
NovellGroupwise Version5.57e
NovellGroupwise Version6.0
NovellGroupwise Version6.0.1 Updatesp1
NovellGroupwise Version6.5
NovellGroupwise Version6.5 Updatesp1
NovellGroupwise Version6.5 Updatesp2
NovellGroupwise Version6.5 Updatesp3
NovellGroupwise Version6.5 Updatesp4
NovellGroupwise Version6.5 Updatesp5
NovellGroupwise Version6.5 Updatesp6
NovellGroupwise Version6.5.2
NovellGroupwise Version6.5.3
NovellGroupwise Version6.5.4
NovellGroupwise Version6.5.6
NovellGroupwise Version6.5.7
NovellGroupwise Version7.0
NovellGroupwise Version7.0.3 Updatehp4
NovellGroupwise Version7.0.3 Updatehp5
NovellGroupwise Version7.0.4
NovellGroupwise Version7.0.4 Updateftf
NovellGroupwise Version7.01
NovellGroupwise Version7.01 Updateir1
NovellGroupwise Version7.02
NovellGroupwise Version7.02 Updatehp1
NovellGroupwise Version7.02 Updatehp1a
NovellGroupwise Version7.02 Updatehp2
NovellGroupwise Version7.02 Updatehp2r1
NovellGroupwise Version7.03
NovellGroupwise Version7.03 Updatehp
NovellGroupwise Version7.03 Updatehp2
NovellGroupwise Version7.03 Updatehp3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 33.26% 0.965
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C