CVSS: 5.0EPSS: 64%CPEs: 43EXPL: 0CVE-2012-0410
https://notcve.org/view.php?id=CVE-2012-0410
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter. Una vulnerabilidad de salto de directorio en Novell GroupWise WebAccess antes de v8.03 permite a atacantes remotos leer ficheros de su elección mediante el parámetro User.interface. • http://www.novell.com/support/kb/doc.php?id=7000708 http://www.securitytracker.com/id?1027217 https://bugzilla.novell.com/show_bug.cgi?id=712163 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.5EPSS: 30%CPEs: 32EXPL: 2CVE-2010-4717 – Novell Groupwise Internet Agent - IMAP 'LIST LSUB' Remote Code Execution
https://notcve.org/view.php?id=CVE-2010-4717
Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long (1) LIST or (2) LSUB command. Múltiples desbordamientos de búfer basados en pila en el componente del servidor de IMAP en GroupWise Internet Agent (GWIA) en Novell GroupWise before v8.02HP permite a atacantes remotos ejecutar código de su elección a través de una (1)LIST larga o (2) un comando LSUB. • https://www.exploit-db.com/exploits/15464 http://www.facebook.com/note.php?note_id=477865030928 http://www.novell.com/support/viewContent.do?externalId=7007157&sliceId=1 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=19&Itemid=19 https://bugzilla.novell.com/show_bug.cgi?id=635294 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 4%CPEs: 32EXPL: 1CVE-2010-4711 – Novell Groupwise Internet Agent - IMAP 'LIST' Remote Code Execution
https://notcve.org/view.php?id=CVE-2010-4711
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command. Vulnerabilidad de doble liberación de memoria en el componente de servidor IMAP en GroupWise Agente de Internet (GWIA) en Novell GroupWise antes de v8.02HP permite a atacantes remotos ejecutar código arbitrario mediante un parámetro largo en un comando LIST. • https://www.exploit-db.com/exploits/15463 http://www.facebook.com/note.php?note_id=477865030928 http://www.novell.com/support/viewContent.do?externalId=7007151&sliceId=1 http://zerodayinitiative.com/advisories/ZDI-10-242 https://bugzilla.novell.com/show_bug.cgi?id=647519 • CWE-399: Resource Management Errors •
CVSS: 4.3EPSS: 0%CPEs: 32EXPL: 0CVE-2010-4716
https://notcve.org/view.php?id=CVE-2010-4716
Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el componente WebPublisher de Novell GroupWise en versiones anteriores a v8.02HP, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de parámetros no especificados. • http://www.facebook.com/note.php?note_id=477865030928 http://www.novell.com/support/viewContent.do?externalId=7007158&sliceId=1 https://bugzilla.novell.com/show_bug.cgi?id=651159 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.0EPSS: 1%CPEs: 32EXPL: 1CVE-2010-4715 – Novell Groupwise 8.0 - Multiple Remote Vulnerabilities
https://notcve.org/view.php?id=CVE-2010-4715
Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. NOTE: some of these details are obtained from third party information. Múltiples vulnerabilidades de salto de directorio en, cuando está habilitado register_globals, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección ,utilizando vectores no especificados. NOTA: algunos de estos detalles se han obtenido de información de terceros. • https://www.exploit-db.com/exploits/34980 http://secunia.com/advisories/40820 http://www.facebook.com/note.php?note_id=477865030928 http://www.novell.com/support/viewContent.do?externalId=7007156&sliceId=1 https://bugzilla.novell.com/show_bug.cgi?id=638644 https://bugzilla.novell.com/show_bug.cgi?id=638646 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •