CVE-2007-2171

Published: Apr 24, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

Affected (2)

Products: Novell: Groupwise

Novell

1 product

Groupwise

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Novell Groupwise	Version 7.0
Novell Groupwise	Version 7.0 sp1

References (18)

http://download.novell.com/Download?buildid=8RF83go0nZg~

Source: cve@mitre.org

Patch

http://download.novell.com/Download?buildid=O9ucpbS1bK0~

Source: cve@mitre.org

Patch

http://secunia.com/advisories/24944

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2610

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/466212/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23556

Source: cve@mitre.org

http://www.securitytracker.com/id?1017932

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1455

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-07-015.html

Source: cve@mitre.org

http://download.novell.com/Download?buildid=8RF83go0nZg~