PT-2012-2554 · Novell · Novell Groupwise

Publicado 2012-09-28 · Atualizado 2013-02-14 · CVE-2012-0417

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 before Support Pack 3 Novell GroupWise 2012 before Support Pack 1

Description The issue is related to an integer overflow in the GroupWise Internet Agent (GWIA) component. This allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For Novell GroupWise 8.0, apply Support Pack 3 to resolve the issue. For Novell GroupWise 2012, apply Support Pack 1 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2012-0417

ZDI-12-196

Produtos afetados

Novell Groupwise

Referências · 7

• http://download.novell.com/Download?buildid=O5hTjIiMdMo~ · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2012-0417 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0417 · Nota
• https://bugzilla.novell.com/show_bug.cgi?id=740041 · Nota
• http://securitytracker.com/id?1027599 · Nota
• https://zerodayinitiative.com/advisories/ZDI-12-196 · Nota de Segurança
• http://novell.com/support/kb/doc.php?id=7010770 · Aviso do Fabricante