Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-2069 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Groupwise

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

9.3CRITICALNVD

EPSS

18.1%

top 4.82%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Novell Groupwise

Timeline

PublishedMay 2

Latest updateMay 1

Description

Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDnovell/groupwise7.0

🔴Vulnerability Details

GHSA

GHSA-qv4m-x2w5-mw3g: Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto:↗2022-05-01

▶

CVEList

CVE-2008-2069: Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto:↗2008-05-02

▶

💥Exploits & PoCs

Exploit-DB

Groupwise 7.0 - 'mailto: scheme' Buffer Overflow (PoC)↗2008-04-28

▶