CVE-2009-1636: Buffer Overflow
Published May 26, 2009
·Updated
Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
Affected Software
12 affected components
Novell GroupWise=7.0
Novell GroupWise=7.0-sp1
Novell GroupWise=7.0-sp2
Novell GroupWise=7.0-sp3
Novell GroupWise=7.0.0-sp1
Novell GroupWise=7.0.0-sp2
Novell GroupWise=7.0.2
Novell GroupWise=7.0.3
Novell GroupWise=7.01
Novell GroupWise=7.03-hp1a
Novell GroupWise=7.03-hp2
Novell GroupWise=8.0-hp1
Event History
May 26, 2009
CVE Published
via MITRE·03:16 PM
Data Sourced
via MITRE·03:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1636?
CVE-2009-1636 is classified with a high severity due to the potential for remote code execution.
2
How do I fix CVE-2009-1636?
To fix CVE-2009-1636, upgrade Novell GroupWise to version 7.03 HP3 or 8.0 HP2 or later.
3
Who is affected by CVE-2009-1636?
CVE-2009-1636 affects users of Novell GroupWise versions 7.x before 7.03 HP3 and 8.x before 8.0 HP2.
4
What types of attacks are possible through CVE-2009-1636?
CVE-2009-1636 allows remote attackers to execute arbitrary code via crafted e-mail addresses or SMTP commands.
5
Is there a workaround for CVE-2009-1636?
There are no known effective workarounds for CVE-2009-1636, thus an upgrade is recommended.