RCE in Novell Groupwise
CVE-2011-4189
The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.215 (95.8th percentile) — read the EPSS interpretation.
Affected products
- Novell Groupwise — versions 8.0, 8.0.1, 8.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- 79720 (x_refsource_OSVDB, vdb-entry)
- groupwise-nab-bo(73588) (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Exploit, x_refsource_MISC)
- 52233 (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- 48199 (x_refsource_SECUNIA, third-party-advisory)
- 1026753 (vdb-entry, x_refsource_SECTRACK)