CVE-2012-0271

high · 10

Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.

CVSS

17.2%

EPSS (exploit prob.)

97th

EPSS percentile

2012-09-19

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

Vendor	Product	Affected versions
novell	groupwise	8.0
novell	groupwise	8.01
novell	groupwise	8.01
novell	groupwise	8.02
novell	groupwise	8.02
novell	groupwise	8.02
novell	groupwise	8.02
novell	groupwise	8.03
novell	groupwise	2012
novell	groupwise	5.2
novell	groupwise	5.5
novell	groupwise	5.57e
novell	groupwise	6.0
novell	groupwise	6.0.1
novell	groupwise	6.5
novell	groupwise	6.5
novell	groupwise	6.5
novell	groupwise	6.5
novell	groupwise	6.5
novell	groupwise	6.5
novell	groupwise	6.5
novell	groupwise	6.5.2
novell	groupwise	6.5.3
novell	groupwise	6.5.4
novell	groupwise	6.5.6
novell	groupwise	6.5.7
novell	groupwise	7.0
novell	groupwise	7.0.3
novell	groupwise	7.0.3
novell	groupwise	7.0.4
novell	groupwise	7.0.4
novell	groupwise	7.01
novell	groupwise	7.01
novell	groupwise	7.02
novell	groupwise	7.02
novell	groupwise	7.02
novell	groupwise	7.02
novell	groupwise	7.02
novell	groupwise	7.03
novell	groupwise	7.03

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-0271