Lucene search

K
cve[email protected]CVE-2011-2663
HistoryOct 08, 2011 - 2:52 a.m.

CVE-2011-2663

2011-10-0802:52:52
CWE-119
web.nvd.nist.gov
25
cve-2011-2663
array index error
novell groupwise
gwia
groupwise internet agent
vcalendar
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.683 Medium

EPSS

Percentile

98.0%

Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.

Affected configurations

NVD
Node
novellgroupwiseMatch8.0
OR
novellgroupwiseMatch8.0hp1
OR
novellgroupwiseMatch8.0hp2
CPENameOperatorVersion
novell:groupwisenovell groupwiseeq8.0

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.683 Medium

EPSS

Percentile

98.0%