PT-2011-1667 · Novell · Groupwise

Published 2011-01-31 · Updated 2011-02-16 · CVE-2010-4717

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions prior to 8.02HP

Description The issue is related to multiple stack-based buffer overflows in the IMAP server component of the GroupWise Internet Agent (GWIA). This can be exploited by remote attackers to execute arbitrary code via long LIST or LSUB commands, such as /api/imap endpoints, by manipulating the command variable. No information is provided about the estimated number of potentially affected devices or real-world incidents.

Recommendations For versions prior to 8.02HP, update to version 8.02HP or later to resolve the issue. As a temporary workaround, consider restricting access to the IMAP server component to minimize the risk of exploitation. Avoid using long LIST or LSUB commands in the affected API endpoints until the issue is resolved.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-4717

Affected Products

Groupwise

References · 7

• 🔥 https://exploit-db.com/exploits/15464 · Exploit
• 🔥 http://protekresearchlab.com/index.php?option=com_content&view=article&id=19&Itemid=19 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4717 · Security Note
• http://novell.com/support/viewContent.do?externalId=7007157&sliceId=1 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4717 · Note
• http://facebook.com/note.php?note_id=477865030928 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=635294 · Note