Novell

Groupwise

74 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2011-0334

  • EPSS 22.25%
  • Veröffentlicht 08.10.2011 02:52:52
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file.

10

CVE-2011-0333

  • EPSS 7.29%
  • Veröffentlicht 08.10.2011 02:52:52
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALEN...

5

CVE-2011-2218

  • EPSS 1.73%
  • Veröffentlicht 08.10.2011 02:52:52
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, a different vulnerability than CVE-2011-2219.

5

CVE-2011-2219

  • EPSS 1.73%
  • Veröffentlicht 08.10.2011 02:52:52
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, a different vulnerability than CVE-2011-2218.

4.3

CVE-2011-2661

  • EPSS 0.46%
  • Veröffentlicht 08.10.2011 02:52:52
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.

10

CVE-2011-2662

  • EPSS 16.73%
  • Veröffentlicht 08.10.2011 02:52:52
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail messag...

10

CVE-2011-2663

  • EPSS 5.34%
  • Veröffentlicht 08.10.2011 02:52:52
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.

6.5

CVE-2010-4717

Exploit
  • EPSS 19.15%
  • Veröffentlicht 31.01.2011 20:00:47
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long (1) LIST or (2) LSUB command.

4.3

CVE-2010-4716

  • EPSS 1.31%
  • Veröffentlicht 31.01.2011 20:00:47
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5

CVE-2010-4715

  • EPSS 4.09%
  • Veröffentlicht 31.01.2011 20:00:47
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. NOTE: some of these details ar...