Lucene search

K
cve[email protected]CVE-2010-2777
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-2777

2022-10-0316:21:06
CWE-119
web.nvd.nist.gov
31
cve
buffer overflow
novell
groupwise
imap
server
security
vulnerability

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%

Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE command.

Affected configurations

NVD
Node
novellgroupwiseMatch7.0sp1
OR
novellgroupwiseMatch7.0sp2
OR
novellgroupwiseMatch7.0sp3
OR
novellgroupwiseMatch7.0sp4
OR
novellgroupwiseMatch8.0
OR
novellgroupwiseMatch8.0sp1

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%

Related for CVE-2010-2777