Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-0271

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2012-0271
Last Modified 01 Apr 2013 11:14:42
Published 19 Sep 2012 06:57:01
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2012-0271

Summary

Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.

Vulnerable Systems

Application

  • Novell Groupwise 2012

  • Novell Groupwise 5.2

  • Novell Groupwise 5.5

  • Novell Groupwise 5.57e

  • Novell Groupwise 6.0

  • Novell Groupwise 6.0.1

  • Novell Groupwise 6.5

  • Novell Groupwise 6.5.2

  • Novell Groupwise 6.5.3

  • Novell Groupwise 6.5.4

  • Novell Groupwise 6.5.6

  • Novell Groupwise 6.5.7

  • Novell Groupwise 7.0

  • Novell Groupwise 7.0.3

  • Novell Groupwise 7.0.4

  • Novell Groupwise 7.01

  • Novell Groupwise 7.02

  • Novell Groupwise 7.03

  • Novell Groupwise 8.0

  • Novell Groupwise 8.01

  • Novell Groupwise 8.02

  • Novell Groupwise 8.03


References

CONFIRM - https://bugzilla.novell.com/show_bug.cgi?id=746199

MISC - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=61&Itemid=61

CONFIRM - http://www.novell.com/support/kb/doc.php?id=7010769

OSVDB - 85426


Last Updated: 27 May 2016 11:00:46