Lucene search

K
cve[email protected]CVE-2010-4713
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4713

2022-10-0316:21:06
CWE-189
web.nvd.nist.gov
24
cve-2010-4713
integer signedness error
gwia.exe
groupwise internet agent
novell groupwise
remote code execution
content-type header
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.293 Low

EPSS

Percentile

96.9%

Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header.

Affected configurations

NVD
Node
novellgroupwiseRange8.0.2
OR
novellgroupwiseMatch4.1
OR
novellgroupwiseMatch4.1a
OR
novellgroupwiseMatch5.0
OR
novellgroupwiseMatch5.1
OR
novellgroupwiseMatch5.2
OR
novellgroupwiseMatch5.5
OR
novellgroupwiseMatch5.5enhancement_pack
OR
novellgroupwiseMatch5.57e
OR
novellgroupwiseMatch6.0
OR
novellgroupwiseMatch6.0sp1
OR
novellgroupwiseMatch6.0sp5
OR
novellgroupwiseMatch6.0.1sp1
OR
novellgroupwiseMatch6.5
OR
novellgroupwiseMatch6.5sp1
OR
novellgroupwiseMatch6.5sp2
OR
novellgroupwiseMatch6.5sp3
OR
novellgroupwiseMatch6.5sp4
OR
novellgroupwiseMatch6.5sp5
OR
novellgroupwiseMatch6.5sp6
OR
novellgroupwiseMatch6.5.2
OR
novellgroupwiseMatch6.5.3
OR
novellgroupwiseMatch6.5.4
OR
novellgroupwiseMatch6.5.6
OR
novellgroupwiseMatch6.5.7
OR
novellgroupwiseMatch7.0
OR
novellgroupwiseMatch7.0.1
OR
novellgroupwiseMatch7.0.2
OR
novellgroupwiseMatch7.0.3
OR
novellgroupwiseMatch7.0.4
OR
novellgroupwiseMatch8.0
OR
novellgroupwiseMatch8.0.1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.293 Low

EPSS

Percentile

96.9%

Related for CVE-2010-4713