CVE-2007-2171

Novell GroupWise WebAccess - Stack-based Buffer Overflow via Base64 HTTP Basic Authentication

Title source: llm

Description

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

References (9)

Core 9

Core References

Patch x_refsource_confirm

http://download.novell.com/Download?buildid=8RF83go0nZg~

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/1455

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1017932

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24944

Patch x_refsource_confirm

http://download.novell.com/Download?buildid=O9ucpbS1bK0~

Third Party Advisory x_refsource_misc

http://www.zerodayinitiative.com/advisories/ZDI-07-015.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/23556

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/466212/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/2610

Scores

EPSS 0.3622

EPSS Percentile 97.2%

Details

Status published

Products (1)

novell/groupwise 7.0 (2 CPE variants)

Published Apr 24, 2007

Tracked Since Feb 18, 2026