Lucene search

K
cve[email protected]CVE-2007-2171
HistoryApr 24, 2007 - 8:19 p.m.

CVE-2007-2171

2007-04-2420:19:00
web.nvd.nist.gov
22
cve-2007-2171
buffer overflow
base64_decode
novell groupwise
gw webaccess
nvd
remote code execution
http basic authentication

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.946 High

EPSS

Percentile

99.3%

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

Affected configurations

NVD
Node
novellgroupwiseMatch7.0
OR
novellgroupwiseMatch7.0sp1
CPENameOperatorVersion
novell:groupwisenovell groupwiseeq7.0

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.946 High

EPSS

Percentile

99.3%