Vulnerabilities > Novell > Groupwise > 5.5
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2011-01-31 | CVE-2010-4713 | Numeric Errors vulnerability in Novell Groupwise Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header. | 10.0 |
| 2011-01-31 | CVE-2010-4712 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Novell Groupwise Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a Content-Type header containing (1) multiple items separated by ; (semicolon) characters or (2) crafted string data. | 10.0 |
| 2011-01-31 | CVE-2010-4711 | Resource Management Errors vulnerability in Novell Groupwise Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command. | 10.0 |
| 2011-01-28 | CVE-2010-4326 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Novell Groupwise Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long (1) REQUEST-STATUS, (2) TZNAME, (3) COMMENT, or (4) RRULE variable in this message. | 10.0 |
| 2011-01-28 | CVE-2010-4325 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Novell Groupwise Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message. | 10.0 |
| 2007-12-18 | CVE-2007-6435 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Novell Groupwise Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail. | 9.3 |
| 2006-06-29 | CVE-2006-3268 | Unspecified vulnerability in Novell Groupwise Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post office. | 5.0 |
| 2002-06-25 | CVE-2002-0341 | Remote Security vulnerability in Novell Groupwise 5.5 GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter. | 5.0 |
| 2001-12-15 | CVE-2001-1195 | Authentication vulnerability in Novell Groupwise Servlet Gateway Default Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges. | 7.5 |
| 2001-10-15 | CVE-2001-1458 | Unspecified vulnerability in Novell Groupwise 5.5/6.0 Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" (dot dot) sequences and a null character. | 5.0 |