CVE-2007-2171

2007-04-2420:19:00

mitre

web.nvd.nist.gov

cve-2007-2171

buffer overflow

base64_decode

novell groupwise

gw webaccess

nvd

remote code execution

http basic authentication

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.946

Percentile

99.3%

JSON

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

Affected configurations

Nvd

Node

novellgroupwiseMatch7.0

novellgroupwiseMatch7.0sp1

VendorProductVersionCPE
novellgroupwise7.0cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*
novellgroupwise7.0cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*