CVEvulnerability
CVE-2010-4711
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command.
Affected configurations
• novell groupwise (<= 8.0.2)
• novell groupwise 4.1
• novell groupwise 4.1a
• novell groupwise 5.0
• novell groupwise 5.1
• novell groupwise 5.2
• novell groupwise 5.5
• novell groupwise 5.57e
• novell groupwise 6.0
• novell groupwise 6.0.1
• novell groupwise 6.5
• novell groupwise 6.5.2
• novell groupwise 6.5.3
• novell groupwise 6.5.4
• novell groupwise 6.5.6
• novell groupwise 6.5.7
• novell groupwise 7.0
• novell groupwise 7.0.1
• novell groupwise 7.0.2
• novell groupwise 7.0.3
• novell groupwise 7.0.4
• novell groupwise 8.0
• novell groupwise 8.0.1
Related
Weakness · not in database (1)
References
- http://www.facebook.com/note.php?note_id=477865030928 www.facebook.com
- http://www.novell.com/support/viewContent.do?externalId=7007151&sliceId=1 Vendor Advisory
- http://zerodayinitiative.com/advisories/ZDI-10-242/ zerodayinitiative.com
- https://bugzilla.novell.com/show_bug.cgi?id=647519 bugzilla.novell.com
- http://www.facebook.com/note.php?note_id=477865030928 www.facebook.com
- http://www.novell.com/support/viewContent.do?externalId=7007151&sliceId=1 Vendor Advisory
- http://zerodayinitiative.com/advisories/ZDI-10-242/ zerodayinitiative.com
- https://bugzilla.novell.com/show_bug.cgi?id=647519 bugzilla.novell.com