Novell

Groupwise

74 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2011-0334

  • EPSS 22.25%
  • Published 08.10.2011 02:52:52
  • Last modified 11.04.2025 00:51:21

Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file.

10

CVE-2011-0333

  • EPSS 7.29%
  • Published 08.10.2011 02:52:52
  • Last modified 11.04.2025 00:51:21

Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALEN...

5

CVE-2011-2218

  • EPSS 1.73%
  • Published 08.10.2011 02:52:52
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, a different vulnerability than CVE-2011-2219.

5

CVE-2011-2219

  • EPSS 1.73%
  • Published 08.10.2011 02:52:52
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, a different vulnerability than CVE-2011-2218.

4.3

CVE-2011-2661

  • EPSS 0.46%
  • Published 08.10.2011 02:52:52
  • Last modified 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.

10

CVE-2011-2662

  • EPSS 16.73%
  • Published 08.10.2011 02:52:52
  • Last modified 11.04.2025 00:51:21

Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail messag...

10

CVE-2011-2663

  • EPSS 5.34%
  • Published 08.10.2011 02:52:52
  • Last modified 11.04.2025 00:51:21

Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.

6.5

CVE-2010-4717

Exploit
  • EPSS 19.15%
  • Published 31.01.2011 20:00:47
  • Last modified 11.04.2025 00:51:21

Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long (1) LIST or (2) LSUB command.

4.3

CVE-2010-4716

  • EPSS 1.31%
  • Published 31.01.2011 20:00:47
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5

CVE-2010-4715

  • EPSS 4.09%
  • Published 31.01.2011 20:00:47
  • Last modified 11.04.2025 00:51:21

Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. NOTE: some of these details ar...