CVE-2011-4189 The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail addr...
HighCVSS 7.5
EPSS 11.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell groupwise | = 8.0 | No fix listed |
| novell groupwise | = 8.0-hp1 | No fix listed |
| novell groupwise | = 8.0-hp2 | No fix listed |
| novell groupwise | = 8.0-sp1 | No fix listed |
| novell groupwise | = 8.0.1 | No fix listed |
| novell groupwise | = 8.0.2 | No fix listed |
| novell groupwise | = 8.0.2-hp1 | No fix listed |
References
- 79720 vdb-entry
- 48199 third-party-advisory
- www.novell.com vendor-advisory
- www.protekresearchlab.com exploit
- 52233 vdb-entry
- 1026753 vdb-entry
- bugzilla.novell.com
- groupwise-nab-bo(73588) vdb-entry