CVE-2010-4717
Novell Groupwise Internet Agent - IMAP 'LIST LSUB' Remote Code Execution
Severity Score
6.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long (1) LIST or (2) LSUB command.
Múltiples desbordamientos de búfer basados en pila en el componente del servidor de IMAP en GroupWise Internet Agent (GWIA) en Novell GroupWise before v8.02HP permite a atacantes remotos ejecutar código de su elección a través de una (1)LIST larga o (2) un comando LSUB.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-11-09 First Exploit
- 2011-01-31 CVE Reserved
- 2011-01-31 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.facebook.com/note.php?note_id=477865030928 | X_refsource_confirm | |
| https://bugzilla.novell.com/show_bug.cgi?id=635294 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/15464 | 2010-11-09 | |
| http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=19&Itemid=19 | 2024-09-16 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.novell.com/support/viewContent.do?externalId=7007157&sliceId=1 | 2011-02-16 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | <= 8.0.2 Search vendor "Novell" for product "Groupwise" and version " <= 8.0.2" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 4.1 Search vendor "Novell" for product "Groupwise" and version "4.1" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 4.1a Search vendor "Novell" for product "Groupwise" and version "4.1a" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.0 Search vendor "Novell" for product "Groupwise" and version "5.0" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.1 Search vendor "Novell" for product "Groupwise" and version "5.1" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.2 Search vendor "Novell" for product "Groupwise" and version "5.2" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.5 Search vendor "Novell" for product "Groupwise" and version "5.5" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.5 Search vendor "Novell" for product "Groupwise" and version "5.5" | enhancement_pack |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.57e Search vendor "Novell" for product "Groupwise" and version "5.57e" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.0 Search vendor "Novell" for product "Groupwise" and version "6.0" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.0 Search vendor "Novell" for product "Groupwise" and version "6.0" | sp1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.0 Search vendor "Novell" for product "Groupwise" and version "6.0" | sp5 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.0.1 Search vendor "Novell" for product "Groupwise" and version "6.0.1" | sp1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp2 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp3 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp4 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp5 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp6 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.2 Search vendor "Novell" for product "Groupwise" and version "6.5.2" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.3 Search vendor "Novell" for product "Groupwise" and version "6.5.3" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.4 Search vendor "Novell" for product "Groupwise" and version "6.5.4" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.6 Search vendor "Novell" for product "Groupwise" and version "6.5.6" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.7 Search vendor "Novell" for product "Groupwise" and version "6.5.7" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0 Search vendor "Novell" for product "Groupwise" and version "7.0" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0.1 Search vendor "Novell" for product "Groupwise" and version "7.0.1" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0.2 Search vendor "Novell" for product "Groupwise" and version "7.0.2" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0.3 Search vendor "Novell" for product "Groupwise" and version "7.0.3" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0.4 Search vendor "Novell" for product "Groupwise" and version "7.0.4" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.0 Search vendor "Novell" for product "Groupwise" and version "8.0" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.0.1 Search vendor "Novell" for product "Groupwise" and version "8.0.1" | - |
Affected
| ||||||