CVEvulnerability
CVE-2012-0271
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-09-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.
Affected configurations
• novell groupwise 8.0
• novell groupwise 8.01
• novell groupwise 8.02
• novell groupwise 8.03
• novell groupwise 2012
• novell groupwise 5.2
• novell groupwise 5.5
• novell groupwise 5.57e
• novell groupwise 6.0
• novell groupwise 6.0.1
• novell groupwise 6.5
• novell groupwise 6.5.2
• novell groupwise 6.5.3
• novell groupwise 6.5.4
• novell groupwise 6.5.6
• novell groupwise 6.5.7
• novell groupwise 7.0
• novell groupwise 7.0.3
• novell groupwise 7.0.4
• novell groupwise 7.01
• novell groupwise 7.02
• novell groupwise 7.03
Related
Weakness · not in database (1)
References
- http://osvdb.org/85426 osvdb.org
- http://www.novell.com/support/kb/doc.php?id=7010769 Vendor Advisory
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=61&Itemid=61 Exploit
- https://bugzilla.novell.com/show_bug.cgi?id=746199 bugzilla.novell.com
- http://osvdb.org/85426 osvdb.org
- http://www.novell.com/support/kb/doc.php?id=7010769 Vendor Advisory
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=61&Itemid=61 Exploit
- https://bugzilla.novell.com/show_bug.cgi?id=746199 bugzilla.novell.com