CVE-2012-0417
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — http://www.novell.com/support/kb/doc.php?id=7010770
Vendor advisory: cve@mitre.org — http://download.novell.com/Download?buildid=O5hTjIiMdMo~
References
- http://download.novell.com/Download?buildid=O5hTjIiMdMo~
- http://www.novell.com/support/kb/doc.php?id=7010770
- http://www.securitytracker.com/id?1027599
- https://bugzilla.novell.com/show_bug.cgi?id=740041
- http://download.novell.com/Download?buildid=O5hTjIiMdMo~
- http://www.novell.com/support/kb/doc.php?id=7010770
- http://www.securitytracker.com/id?1027599
- https://bugzilla.novell.com/show_bug.cgi?id=740041
CWEs
CWE-189
Verify integrity in audit chain (admin only). AS-IS.