QwikSec

Security Database

CVE

CWE

Training

CVE-2010-4326

Published: Jan 28, 2011

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long (1) REQUEST-STATUS, (2) TZNAME, (3) COMMENT, or (4) RRULE variable in this message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://bugzilla.novell.com/show_bug.cgi?id=642340

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

groupwise-requeststatus-bo(64929)

vdb-entry

x_refsource_XF

https://bugzilla.novell.com/show_bug.cgi?id=642339

x_refsource_CONFIRM

https://bugzilla.novell.com/show_bug.cgi?id=642349

x_refsource_CONFIRM

https://bugzilla.novell.com/show_bug.cgi?id=642345

x_refsource_CONFIRM

http://www.facebook.com/note.php?note_id=477865030928

x_refsource_CONFIRM

http://zerodayinitiative.com/advisories/ZDI-10-239/

x_refsource_MISC

http://www.novell.com/support/viewContent.do?externalId=7007155&sliceId=1

x_refsource_CONFIRM

http://www.zerodayinitiative.com/advisories/ZDI-11-025/

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

http://zerodayinitiative.com/advisories/ZDI-10-240/

x_refsource_MISC

http://zerodayinitiative.com/advisories/ZDI-10-243/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.