CVE-2016-5762 Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password,....
CriticalCVSS 9.8
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell groupwise | <= 2012 | No fix listed |
| novell groupwise | = 2014 | No fix listed |
| novell groupwise | = 2014-r2 | No fix listed |
| novell groupwise | = 2014-sp1 | No fix listed |
| novell groupwise | = 2014-sp2 | No fix listed |