PT-2014-3707 · Novell · Novell Groupwise

Published 2014-09-05 · Updated 2017-08-29 · CVE-2014-0610

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions prior to 8.0.3 HP4 Novell GroupWise 2012 versions prior to SP3 Novell GroupWise 2014 versions prior to SP1

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors, resulting in an invalid pointer dereference.

Recommendations For Novell GroupWise versions prior to 8.0.3 HP4, update to version 8.0.3 HP4 or later. For Novell GroupWise 2012 versions prior to SP3, update to SP3 or later. For Novell GroupWise 2014 versions prior to SP1, update to SP1 or later.

Fix

Related Identifiers

CVE-2014-0610

Affected Products

Novell Groupwise

References · 6

• http://novell.com/support/kb/doc.php?id=7015565 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0610 · Security Note
• https://bugzilla.novell.com/show_bug.cgi?id=874533 · Note
• http://securitytracker.com/id/1030802 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0610 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95738 · Note