CVE-2010-4711: Double Free
Published Jan 31, 2011
·Updated
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command.
Affected Software
32 affected components
Novell GroupWise<=8.0.2
Novell GroupWise=4.1
Novell GroupWise=4.1a
Novell GroupWise=5.0
Novell GroupWise=5.1
Novell GroupWise=5.2
Novell GroupWise=5.5
Novell GroupWise=5.5
Novell GroupWise=5.57e
Novell GroupWise=6.0
Novell GroupWise=6.0-sp1
Novell GroupWise=6.0-sp5
Novell GroupWise=6.0.1-sp1
Novell GroupWise=6.5
Novell GroupWise=6.5-sp1
Novell GroupWise=6.5-sp2
Novell GroupWise=6.5-sp3
Novell GroupWise=6.5-sp4
Novell GroupWise=6.5-sp5
Novell GroupWise=6.5-sp6
Novell GroupWise=6.5.2
Novell GroupWise=6.5.3
Novell GroupWise=6.5.4
Novell GroupWise=6.5.6
Novell GroupWise=6.5.7
Novell GroupWise=7.0
Novell GroupWise=7.0.1
Novell GroupWise=7.0.2
Novell GroupWise=7.0.3
Novell GroupWise=7.0.4
Novell GroupWise=8.0
Novell GroupWise=8.0.1
Event History
Jan 31, 2011
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4711?
CVE-2010-4711 is classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2010-4711?
To fix CVE-2010-4711, upgrade to Novell GroupWise version 8.02HP or later.
3
Which versions of GroupWise are affected by CVE-2010-4711?
CVE-2010-4711 affects Novell GroupWise versions prior to 8.02HP, including 5.0 through 7.0.4.
4
What type of vulnerability is CVE-2010-4711?
CVE-2010-4711 is a double free vulnerability found in the IMAP server component of Novell GroupWise.
5
What can an attacker do with CVE-2010-4711?
An attacker exploiting CVE-2010-4711 can execute arbitrary code on the affected system by sending specially crafted LIST commands.