Vulnerability in Novell Groupwise

CVE-2011-2662

Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message.

EPSS: 0.041 (89.7th percentile) — read the EPSS interpretation.

Affected products

Novell Groupwise — versions 8.0
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)