CVE-2010-4326: Buffer Overflow
Published Jan 28, 2011
·Updated
Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long (1) REQUEST-STATUS, (2) TZNAME, (3) COMMENT, or (4) RRULE variable in this message.
Affected Software
32 affected components
Novell GroupWise<=8.0.2
Novell GroupWise=4.1
Novell GroupWise=4.1a
Novell GroupWise=5.0
Novell GroupWise=5.1
Novell GroupWise=5.2
Novell GroupWise=5.5
Novell GroupWise=5.5
Novell GroupWise=5.57e
Novell GroupWise=6.0
Novell GroupWise=6.0-sp1
Novell GroupWise=6.0-sp5
Novell GroupWise=6.0.1-sp1
Novell GroupWise=6.5
Novell GroupWise=6.5-sp1
Novell GroupWise=6.5-sp2
Novell GroupWise=6.5-sp3
Novell GroupWise=6.5-sp4
Novell GroupWise=6.5-sp5
Novell GroupWise=6.5-sp6
Novell GroupWise=6.5.2
Novell GroupWise=6.5.3
Novell GroupWise=6.5.4
Novell GroupWise=6.5.6
Novell GroupWise=6.5.7
Novell GroupWise=7.0
Novell GroupWise=7.0.1
Novell GroupWise=7.0.2
Novell GroupWise=7.0.3
Novell GroupWise=7.0.4
Novell GroupWise=8.0
Novell GroupWise=8.0.1
Event History
Jan 28, 2011
CVE Published
via MITRE·08:29 PM
Data Sourced
via MITRE·08:29 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4326?
CVE-2010-4326 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2010-4326?
To fix CVE-2010-4326, upgrade to a patched version of Novell GroupWise, specifically 8.02HP or later.
3
What software versions are affected by CVE-2010-4326?
CVE-2010-4326 affects multiple versions of Novell GroupWise, including versions 4.1 to 8.0.2.
4
Can CVE-2010-4326 be exploited remotely?
Yes, CVE-2010-4326 can be exploited remotely by sending specially crafted VCALENDAR messages.
5
What type of vulnerability is CVE-2010-4326 classified as?
CVE-2010-4326 is classified as a buffer overflow vulnerability.