Lucene search

K
nvd[email protected]NVD:CVE-2007-2171
HistoryApr 24, 2007 - 8:19 p.m.

CVE-2007-2171

2007-04-2420:19:00
web.nvd.nist.gov
6

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

Low

EPSS

0.946

Percentile

99.3%

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

Affected configurations

Nvd
Node
novellgroupwiseMatch7.0
OR
novellgroupwiseMatch7.0sp1
VendorProductVersionCPE
novellgroupwise7.0cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*
novellgroupwise7.0cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

Low

EPSS

0.946

Percentile

99.3%