CVE-2010-4715

Multiple directory traversal vulnerabilities in the 1 WebAccess Agent and 2 Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2010-4711

CVE-2010-4711 is a double-free vulnerability in the IMAP server component of GroupWise Internet Agent (GWIA). Affected product/version: GroupWise GWIA before 8.02HP. Condition: remote attacker can execute arbitrary code by sending a large parameter in an IMAP LIST command. Exploitation details ar...

CVE-2010-4717

CVE-2010-4717 : Multiple stack-based buffer overflows in the IMAP server component of GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote code execution via long LIST or LSUB commands. Affected product/versions are GWIA prior to 8.02HP; root cause is stack-based overflo...

CVE-2010-4715: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the 1 WebAccess Agent and 2 Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2010-4713: Undefined Security Weakness

Integer signedness error in gwia.exe in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header...

CVE-2010-4712: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a Content-Type header containing 1 multiple items separated by ; semicolon characters or 2 crafted string data...

CVE-2010-4716: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4717: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long 1 LIST or 2 LSUB command...

CVE-2010-4714: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to 1 gwpoa.exe in the Post Office Agent, 2 gwmta.exe in the Message Transfer Agent, 3 gwia.exe in the Internet Agent, 4 the WebAccess Agent, or 5 th...

CVE-2010-4711: Undefined Security Weakness

Double free vulnerability in the IMAP server component in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command...

CVE-2010-2778

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to a "Javascript XSS exploit."...

CVE-2010-2779

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to "replies."...

CVE-2010-2777

Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent GWIA in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE command...

Cross site scripting

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to a "Javascript XSS exploit."...

Cross site scripting

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to "replies."...

Stack overflow

Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent GWIA in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE command...

CVE-2010-2778

This entry concerns CVE-2010-2778, a Cross-site Scripting (XSS) vulnerability in Novell GroupWise WebAccess. The affected products are GroupWise WebAccess 7.x prior to 7.0 post-SP4 FTF and 8.x prior to 8.0 SP2. The underlying issue is improper handling/sanitization of HTML in messages, allowing r...

CVE-2010-2777

Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent GWIA in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE command...

CVE-2010-2779

This CVE (CVE-2010-2779) affects Novell GroupWise 8.x WebAccess prior to 8.0 SP2. The issue is a cross-site scripting (XSS) vulnerability in WebAccess when handling HTML messages, related to “replies.” The underlying flaw allows remote attackers to inject arbitrary client-side script into the use...

CVE-2010-2779

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to "replies."...