CVE-2009-0410

Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-02-03 19:30

Updated : 2024-02-04 17:33


NVD link : CVE-2009-0410

Mitre link : CVE-2009-0410

CVE.ORG link : CVE-2009-0410


JSON object : View

Products Affected

novell

  • groupwise
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer