CVE-2013-1085

2013-03-2916:09:00

CWE-119

[email protected]

web.nvd.nist.gov

108

cve

2013

1085

buffer overflow

nim

protocol

novell groupwise messenger

novell messenger

remote attackers

arbitrary code

nvd

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.472 Medium

EPSS

Percentile

97.5%

JSON

Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.

CPENameOperatorVersion
novell:groupwise_messengernovell groupwise messengereq2.0.2
novell:groupwise_messengernovell groupwise messengereq1.0.6
novell:groupwise_messengernovell groupwise messengerle2.0.4
novell:groupwise_messengernovell groupwise messengereq2.0
novell:messengernovell messengerle2.1
novell:messengernovell messengereq2.2.0
novell:messengernovell messengerle2.2.1

CPE	Name	Operator	Version
novell:groupwise_messenger	novell groupwise messenger	eq	2.0.2
novell:groupwise_messenger	novell groupwise messenger	eq	1.0.6
novell:groupwise_messenger	novell groupwise messenger	le	2.0.4
novell:groupwise_messenger	novell groupwise messenger	eq	2.0
novell:messenger	novell messenger	le	2.1
novell:messenger	novell messenger	eq	2.2.0
novell:messenger	novell messenger	le	2.2.1