2011-01-31 21:00:47 2011-04-26 06:00:00

Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Internet Initiative Japan SEIL B1 Firmware 2.72 Internet Initiative Japan SEIL B1 Firmware 2.75 Novell Groupwise 5.5 Enhancement pack (not an official CPE) Internet Initiative Japan SEIL B1 Firmware 2.73 Internet Initiative Japan SEIL B1 Firmware 2.74 Novell Groupwise 8.0.1 (not an official CPE) Novell Groupwise 7.0.3 (not an official CPE) Internet Initiative Japan SEIL B1 Firmware 2.76 Internet Initiative Japan SEIL B1 Firmware 2.80 Novell Groupwise 7.0.1 (not an official CPE) Novell Groupwise 4.1a (not an official CPE) Internet Initiative Japan SEIL B1 Firmware 2.62 Novell Groupwise 6.0 Sp5 (not an official CPE) Internet Initiative Japan SEIL B1 Firmware 2.61 Internet Initiative Japan SEIL B1 Firmware 2.71 Internet Initiative Japan SEIL B1 Firmware 2.70 Internet Initiative Japan SEIL B1 Firmware 2.63 Internet Initiative Japan SEIL B1 Firmware 2.94 Internet Initiative Japan SEIL B1 Firmware 2.65 Novell Groupwise 5.1 (not an official CPE) Internet Initiative Japan SEIL B1 Firmware 2.60 Novell Groupwise 5.0 (not an official CPE) Internet Initiative Japan SEIL B1 Firmware 2.64 Internet Initiative Japan SEIL B1 Firmware 2.77 Novell Groupwise 4.1 (not an official CPE) Internet Initiative Japan SEIL B1 Firmware 2.67 Internet Initiative Japan SEIL B1 Firmware 2.66 Novell Groupwise 7.0.2 (not an official CPE) Internet Initiative Japan SEIL B1 Firmware 2.69 Internet Initiative Japan SEIL B1 Firmware 2.68 Novell Groupwise 8.0.2 (not an official CPE) Novell Groupwise 6.0 Sp1 (not an official CPE)