CVE-2010-4714

Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) gwpoa.exe in the Post Office Agent, (2) gwmta.exe in the Message Transfer Agent, (3) gwia.exe in the Internet Agent, (4) the WebAccess Agent, or (5) the Monitor Agent.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
novellgroupwise
𝑥
≤ 8.0.2
novellgroupwise
4.1
novellgroupwise
4.1a:a
novellgroupwise
5.0
novellgroupwise
5.1
novellgroupwise
5.2
novellgroupwise
5.5
novellgroupwise
5.5
novellgroupwise
5.57e:e
novellgroupwise
6.0
novellgroupwise
6.0:sp1
novellgroupwise
6.0:sp5
novellgroupwise
6.0.1:sp1
novellgroupwise
6.5
novellgroupwise
6.5:sp1
novellgroupwise
6.5:sp2
novellgroupwise
6.5:sp3
novellgroupwise
6.5:sp4
novellgroupwise
6.5:sp5
novellgroupwise
6.5:sp6
novellgroupwise
6.5.2
novellgroupwise
6.5.3
novellgroupwise
6.5.4
novellgroupwise
6.5.6
novellgroupwise
6.5.7
novellgroupwise
7.0
novellgroupwise
7.0.1
novellgroupwise
7.0.2
novellgroupwise
7.0.3
novellgroupwise
7.0.4
novellgroupwise
8.0
novellgroupwise
8.0.1
𝑥
= Vulnerable software versions