Lucene search

K
cve[email protected]CVE-2011-2662
HistoryOct 08, 2011 - 2:52 a.m.

CVE-2011-2662

2011-10-0802:52:00
CWE-189
web.nvd.nist.gov
24
cve-2011-2662
novell groupwise
gwia
groupwise 8.0
remote code execution
vcalendar attachment
integer signedness error

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.523 Medium

EPSS

Percentile

97.6%

Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message.

CPENameOperatorVersion
novell:groupwisenovell groupwiseeq8.0

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.523 Medium

EPSS

Percentile

97.6%