Lucene search

K
cve[email protected]CVE-2011-0334
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-0334

2022-10-0316:15:19
CWE-119
web.nvd.nist.gov
24
cve-2011-0334
stack-based buffer overflow
groupwise internet agent
remote code execution
http request
css file
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.591 Medium

EPSS

Percentile

97.8%

Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file.

Affected configurations

NVD
Node
novellgroupwiseMatch8.0
OR
novellgroupwiseMatch8.0hp1
OR
novellgroupwiseMatch8.0hp2
CPENameOperatorVersion
novell:groupwisenovell groupwiseeq8.0

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.591 Medium

EPSS

Percentile

97.8%