CVEvulnerability
CVE-2009-1636
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-05-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
Affected configurations
• novell groupwise 7.0
• novell groupwise 7.0.0
• novell groupwise 7.0.2
• novell groupwise 7.0.3
• novell groupwise 7.01
• novell groupwise 7.03
• novell groupwise 8.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/54644 osvdb.org
- http://osvdb.org/54645 osvdb.org
- http://secunia.com/advisories/35177 Vendor Advisory
- http://www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1 www.novell.com
- http://www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1 Vendor Advisory
- http://www.securityfocus.com/archive/1/503724/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35064 www.securityfocus.com
- http://www.securityfocus.com/bid/35065 www.securityfocus.com
- http://www.securitytracker.com/id?1022276 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1393 Vendor Advisory
- http://www.vupen.com/exploits/Novell_GroupWise_GWIA_Email_Address_Remote_Buffer_Overflow_Exploit_1393141.php Vendor Advisory
- http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_1393140.php Vendor Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=478892 bugzilla.novell.com
- https://bugzilla.novell.com/show_bug.cgi?id=482914 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50692 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50693 exchange.xforce.ibmcloud.com
- http://osvdb.org/54644 osvdb.org
- http://osvdb.org/54645 osvdb.org
- http://secunia.com/advisories/35177 Vendor Advisory
- http://www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1 www.novell.com
- http://www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1 Vendor Advisory
- http://www.securityfocus.com/archive/1/503724/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35064 www.securityfocus.com
- http://www.securityfocus.com/bid/35065 www.securityfocus.com
- http://www.securitytracker.com/id?1022276 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1393 Vendor Advisory
- http://www.vupen.com/exploits/Novell_GroupWise_GWIA_Email_Address_Remote_Buffer_Overflow_Exploit_1393141.php Vendor Advisory
- http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_1393140.php Vendor Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=478892 bugzilla.novell.com
- https://bugzilla.novell.com/show_bug.cgi?id=482914 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50692 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50693 exchange.xforce.ibmcloud.com