First published: Fri Sep 05 2014(Updated: )
The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Micro Focus GroupWise | <=8.03 | |
Micro Focus GroupWise | =8.0 | |
Micro Focus GroupWise | =8.00-hp1 | |
Micro Focus GroupWise | =8.00-hp2 | |
Micro Focus GroupWise | =8.00-hp3 | |
Micro Focus GroupWise | =8.01 | |
Micro Focus GroupWise | =8.01-hp | |
Micro Focus GroupWise | =8.02 | |
Micro Focus GroupWise | =8.02-hp1 | |
Micro Focus GroupWise | =8.02-hp2 | |
Micro Focus GroupWise | =8.02-hp3 | |
Micro Focus GroupWise | =8.03 | |
Micro Focus GroupWise | =8.03-hp1 | |
Micro Focus GroupWise | =8.03-hp2 | |
Micro Focus GroupWise | =2012 | |
Micro Focus GroupWise | =2012-sp1 | |
Micro Focus GroupWise | =2012-sp2 | |
Micro Focus GroupWise | =2014 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-0610 has a high severity rating due to its potential to allow remote code execution or denial of service.
To fix CVE-2014-0610, upgrade to Novell GroupWise version 8.0.3 HP4 or later, or 2012 SP3 or later.
CVE-2014-0610 affects versions of Novell GroupWise prior to 8.0.3 HP4, 2012 prior to SP3, and 2014 prior to SP1 on Windows.
The risks associated with CVE-2014-0610 include unauthorized remote code execution and potential disruption of service through a denial of service.
Yes, systems running vulnerable versions of Novell GroupWise on Windows are at risk of CVE-2014-0610.