CVE-2012-0271
Novell Groupwise 8.0.2 HP3 and 2012 - Integer Overflow
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.
Un desbordamiento de entero en el componente de consola web en gwia.exe en el Agente de Internet de GroupWise (GWIA) en Novell GroupWise v8.0 antes de v8.0.3 HP1 y 2012 antes de SP1 podría permitir a atacantes remotos ejecutar código de su elección a través de una solicitud hecha a mano que dispara un desbordamiento de búfer basado en memoria dinámica (heap), tal y como queda demostrado con una solicitud con un -1 en la cabecera HTTP "Content-Length".
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-12-30 CVE Reserved
- 2012-09-17 First Exploit
- 2012-09-19 CVE Published
- 2024-08-06 CVE Updated
- 2024-10-08 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-189: Numeric Errors
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/85426 | Vdb Entry | |
| https://bugzilla.novell.com/show_bug.cgi?id=746199 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/21326 | 2012-09-17 | |
| http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=61&Itemid=61 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.novell.com/support/kb/doc.php?id=7010769 | 2013-04-02 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.0 Search vendor "Novell" for product "Groupwise" and version "8.0" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.01 Search vendor "Novell" for product "Groupwise" and version "8.01" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.01 Search vendor "Novell" for product "Groupwise" and version "8.01" | hp |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.02 Search vendor "Novell" for product "Groupwise" and version "8.02" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.02 Search vendor "Novell" for product "Groupwise" and version "8.02" | hp1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.02 Search vendor "Novell" for product "Groupwise" and version "8.02" | hp2 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.02 Search vendor "Novell" for product "Groupwise" and version "8.02" | hp3 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 8.03 Search vendor "Novell" for product "Groupwise" and version "8.03" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 2012 Search vendor "Novell" for product "Groupwise" and version "2012" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.2 Search vendor "Novell" for product "Groupwise" and version "5.2" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.5 Search vendor "Novell" for product "Groupwise" and version "5.5" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 5.57e Search vendor "Novell" for product "Groupwise" and version "5.57e" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.0 Search vendor "Novell" for product "Groupwise" and version "6.0" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.0.1 Search vendor "Novell" for product "Groupwise" and version "6.0.1" | sp1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp2 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp3 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp4 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp5 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5 Search vendor "Novell" for product "Groupwise" and version "6.5" | sp6 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.2 Search vendor "Novell" for product "Groupwise" and version "6.5.2" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.3 Search vendor "Novell" for product "Groupwise" and version "6.5.3" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.4 Search vendor "Novell" for product "Groupwise" and version "6.5.4" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.6 Search vendor "Novell" for product "Groupwise" and version "6.5.6" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 6.5.7 Search vendor "Novell" for product "Groupwise" and version "6.5.7" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0 Search vendor "Novell" for product "Groupwise" and version "7.0" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0.3 Search vendor "Novell" for product "Groupwise" and version "7.0.3" | hp4 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0.3 Search vendor "Novell" for product "Groupwise" and version "7.0.3" | hp5 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0.4 Search vendor "Novell" for product "Groupwise" and version "7.0.4" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.0.4 Search vendor "Novell" for product "Groupwise" and version "7.0.4" | ftf |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.01 Search vendor "Novell" for product "Groupwise" and version "7.01" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.01 Search vendor "Novell" for product "Groupwise" and version "7.01" | ir1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.02 Search vendor "Novell" for product "Groupwise" and version "7.02" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.02 Search vendor "Novell" for product "Groupwise" and version "7.02" | hp1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.02 Search vendor "Novell" for product "Groupwise" and version "7.02" | hp1a |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.02 Search vendor "Novell" for product "Groupwise" and version "7.02" | hp2 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.02 Search vendor "Novell" for product "Groupwise" and version "7.02" | hp2r1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.03 Search vendor "Novell" for product "Groupwise" and version "7.03" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.03 Search vendor "Novell" for product "Groupwise" and version "7.03" | hp |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.03 Search vendor "Novell" for product "Groupwise" and version "7.03" | hp2 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.03 Search vendor "Novell" for product "Groupwise" and version "7.03" | hp3 |
Affected
| ||||||
| Novell Search vendor "Novell" | Groupwise Search vendor "Novell" for product "Groupwise" | 7.03 Search vendor "Novell" for product "Groupwise" and version "7.03" | hp3\+ftf |
Affected
| ||||||