CVE-2007-2171 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Groupwise

3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
36.2%
top 2.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Groupwise
Timeline
PublishedApr 24
Latest updateMay 1

Description

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: download.novell.com ↗Patch: download.novell.com ↗Patch: download.novell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-24g5-659f-65j9: Stack-based buffer overflow in the base64_decode function in GWINTER↗2022-05-01
▶
CVEList
CVE-2007-2171: Stack-based buffer overflow in the base64_decode function in GWINTER↗2007-04-24
▶
CVE-2007-2171 — Novell Groupwise vulnerability | cvebase