PT-2012-2554 · Novell · Novell Groupwise

Published 2012-09-28 · Updated 2013-02-14 · CVE-2012-0417

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 before Support Pack 3 Novell GroupWise 2012 before Support Pack 1

Description The issue is related to an integer overflow in the GroupWise Internet Agent (GWIA) component. This allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For Novell GroupWise 8.0, apply Support Pack 3 to resolve the issue. For Novell GroupWise 2012, apply Support Pack 1 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2012-0417

ZDI-12-196

Affected Products

Novell Groupwise

References · 7

• http://download.novell.com/Download?buildid=O5hTjIiMdMo~ · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-0417 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-196 · Security Note
• http://novell.com/support/kb/doc.php?id=7010770 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0417 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=740041 · Note
• http://securitytracker.com/id?1027599 · Note