CVE-2016-5762: Buffer Overflow
Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5762?
CVE-2016-5762 has been classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2016-5762?
To fix CVE-2016-5762, update Novell GroupWise to version 2014 R2 Service Pack 1 Hot Patch 1 or later.
What are the common attack vectors for CVE-2016-5762?
Attackers commonly exploit CVE-2016-5762 by sending specially crafted long usernames or passwords to trigger the integer overflow.
Which versions of Novell GroupWise are affected by CVE-2016-5762?
CVE-2016-5762 affects Novell GroupWise versions prior to 2014 R2 Service Pack 1 Hot Patch 1, including 2012 and 2014 versions.
What type of vulnerability is CVE-2016-5762?
CVE-2016-5762 is an integer overflow vulnerability that can lead to a heap-based buffer overflow.