PT-2007-3513 · Novell · Novell Groupwise Webaccess

Publicado 2007-04-24 · Atualizado 2018-10-16 · CVE-2007-2171

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell GroupWise WebAccess versions prior to 7.0 SP2

Description The issue is related to a stack-based buffer overflow in the base64 decode function within GWINTER.exe. This occurs when handling long base64 content in an HTTP Basic Authentication request, potentially allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to 7.0 SP2, update to version 7.0 SP2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2171

Produtos afetados

Novell Groupwise Webaccess

Referências · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-2171 · Nota de Segurança
• http://secunia.com/advisories/24944 · Aviso do Fabricante
• http://securitytracker.com/id?1017932 · Nota
• http://vupen.com/english/advisories/2007/1455 · Nota
• http://download.novell.com/Download?buildid=8RF83go0nZg~ · Correção
• http://securityreason.com/securityalert/2610 · Nota
• http://securityfocus.com/archive/1/466212/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2171 · Nota
• http://download.novell.com/Download?buildid=O9ucpbS1bK0~ · Correção
• http://securityfocus.com/bid/23556 · Nota
• http://zerodayinitiative.com/advisories/ZDI-07-015.html · Nota