{ "id": "CVE-2010-4325", "sourceIdentifier": "cve@mitre.org", "published": "2011-01-28T21:00:01.373", "lastModified": "2018-10-10T20:08:06.303", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message." }, { "lang": "es", "value": "Desbordamiento de b\u00fafer en gwwww1.dll en GroupWise Internet Agent (GWIA) en Novell GroupWise anterior a v8.02HP2 permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de una variable TZID manipulada en un mensaje VCALENDAR." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0 }, "baseSeverity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-119" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:*:hp1:*:*:*:*:*:*", "versionEndIncluding": "8.0.2", "matchCriteriaId": "BD1EEA4F-781B-4876-AC57-21A2AAC96B73" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "7C213746-F174-424F-9647-CDB4FD9C82BA" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:4.1a:*:*:*:*:*:*:*", "matchCriteriaId": "627E9BD8-E3F1-4832-BE7C-3BDCBE4FD4B8" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "9480376B-F221-44A7-B713-98661A63E50D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "B355614B-E3EF-478F-80F6-7AB5BFB5D923" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "22426725-2204-4750-87F6-A57BA727F213" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*", "matchCriteriaId": "A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:5.5:*:enhancement_pack:*:*:*:*:*", "matchCriteriaId": "E7F809F7-C72F-4869-BE95-EE8BF5F0E111" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:5.57e:*:*:*:*:*:*:*", "matchCriteriaId": "125275B0-EBBB-491B-BBBA-434CBAF02DB9" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "194704B6-4820-4398-8906-A1E529ED65AF" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.0:sp1:*:*:*:*:*:*", "matchCriteriaId": "5E0DC694-0DEB-41DE-8A0D-9B649FC2F220" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.0:sp5:*:*:*:*:*:*", "matchCriteriaId": "2B7AE069-1CEC-4818-9582-743ADE5AFCB6" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.0.1:sp1:*:*:*:*:*:*", "matchCriteriaId": "E9A8D9A3-2369-4B08-8A73-2A66EFEB26E1" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*", "matchCriteriaId": "08A78BE7-6426-41CD-BBAF-9BB951726D33" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*", "matchCriteriaId": "E50599E1-45E5-443F-AAEC-F91778CA4792" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5:sp3:*:*:*:*:*:*", "matchCriteriaId": "F0BB62B7-C895-4AB6-9CEB-4B312E334953" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5:sp4:*:*:*:*:*:*", "matchCriteriaId": "A91EAC4C-8EEE-4050-B1AD-E677AD90327D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5:sp5:*:*:*:*:*:*", "matchCriteriaId": "C7F65030-60A2-4EC2-A06D-EC5249FD9FA5" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5:sp6:*:*:*:*:*:*", "matchCriteriaId": "8CB8A6AD-94E4-4871-9BCA-EC637161E70D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "814CAE15-78D8-4205-AC95-E07385A7B3DB" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "251EAE31-9799-453A-ABF7-F3D1C6602A81" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "32AFA45E-7EA4-4067-BDB5-AB4391B3FE65" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "5B8BA202-8147-4837-8C14-C7A60E70EFEE" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:6.5.7:*:*:*:*:*:*:*", "matchCriteriaId": "3D61CB70-5B89-4D12-AA31-9C4BF9A41813" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "FE640E9A-762B-4AF4-8677-818CBF16EA4E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "79FC1678-FAE8-4C2E-AF5B-911569DB1E80" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:7.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "8897DB73-D299-41C8-B4E5-441A6D99F47C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C52E2ABC-20AE-437A-83B0-2E0753787FB5" }, { "vulnerable": true, "criteria": "cpe:2.3:a:novell:groupwise:8.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "E1B3A28C-0A95-4470-9EDA-B87B40E88D0C" } ] } ] } ], "references": [ { "url": "http://osvdb.org/70676", "source": "cve@mitre.org" }, { "url": "http://secunia.com/advisories/43089", "source": "cve@mitre.org" }, { "url": "http://www.novell.com/support/viewContent.do?externalId=7007638&sliceId=1", "source": "cve@mitre.org", "tags": [ "Vendor Advisory" ] }, { "url": "http://www.novell.com/support/viewContent.do?externalId=7009212", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/archive/1/516002/100/0/threaded", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/bid/46025", "source": "cve@mitre.org" }, { "url": "http://www.vupen.com/english/advisories/2011/0220", "source": "cve@mitre.org", "tags": [ "Vendor Advisory" ] }, { "url": "http://www.zerodayinitiative.com/advisories/ZDI-11-027/", "source": "cve@mitre.org" }, { "url": "https://bugzilla.novell.com/show_bug.cgi?id=657818", "source": "cve@mitre.org" }, { "url": "https://bugzilla.novell.com/show_bug.cgi?id=685304", "source": "cve@mitre.org" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64928", "source": "cve@mitre.org" }, { "url": "https://labs.idefense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=944", "source": "cve@mitre.org" } ] }