CVE-2010-4715

Novell GroupWise <8.02HP - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-4715. PoCs published by Francis Provencher.

AI-analyzed exploit summary This exploit targets Novell GroupWise by sending a buffer overflow payload via IMAP commands (LOGIN and LSUB) to trigger a remote code execution vulnerability. The PoC demonstrates a stack-based overflow with a 1368-byte buffer of 'A' characters.

Description

Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Francis Provencher · pythondosnovell
https://www.exploit-db.com/exploits/34980

This exploit targets Novell GroupWise by sending a buffer overflow payload via IMAP commands (LOGIN and LSUB) to trigger a remote code execution vulnerability. The PoC demonstrates a stack-based overflow with a 1368-byte buffer of 'A' characters.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: Novell GroupWise (version not specified)
No auth needed
Prerequisites: Network access to the target IMAP service (port 143)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Various Sources x_refsource_confirm
http://www.facebook.com/note.php?note_id=477865030928
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40820
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=638646
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=638644

Scores

EPSS 0.2827
EPSS Percentile 97.9%

Details

CWE
CWE-22
Status published
Products (23)
novell/groupwise 4.1
novell/groupwise 4.1a
novell/groupwise 5.0
novell/groupwise 5.1
novell/groupwise 5.2
novell/groupwise 5.5 (2 CPE variants)
novell/groupwise 5.57e
novell/groupwise 6.0 (3 CPE variants)
novell/groupwise 6.0.1 sp1
novell/groupwise 6.5 (7 CPE variants)
... and 13 more
Published Jan 31, 2011
Tracked Since Feb 18, 2026