Lucene search

K
cve[email protected]CVE-2012-0271
HistorySep 19, 2012 - 10:57 a.m.

CVE-2012-0271

2012-09-1910:57:00
CWE-189
web.nvd.nist.gov
102
cve-2012-0271
groupwise
internet agent
gwia
novell
integer overflow
remote code execution
buffer overflow
webconsole
nvd

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.114 Low

EPSS

Percentile

95.2%

Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.114 Low

EPSS

Percentile

95.2%

Related for CVE-2012-0271