PT-2011-2277 · Novell · Novell Groupwise

Published 2011-10-08 · Updated 2012-05-14 · CVE-2011-0334

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 before HP3

Description The issue is a stack-based buffer overflow in the gwia.exe component of the GroupWise Internet Agent (GWIA) in Novell GroupWise. This occurs when a remote attacker sends a long HTTP request for a .css file, potentially allowing the execution of arbitrary code.

Recommendations For Novell GroupWise versions 8.0 before HP3, apply the HP3 patch to resolve the issue.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0334

Affected Products

Novell Groupwise

References · 5

• http://secunia.com/secunia_research/2011-67 · Vendor Advisory
• http://novell.com/support/viewContent.do?externalId=7009210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0334 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0334 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=678939 · Note