CVE-2007-2171

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 24.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-24 · updated 2026-06-16

Description

Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.

Affected products

Novell GroupWise: 7.0, 7.0-sp1

References

http://download.novell.com/Download?buildid=8RF83go0nZg~
http://download.novell.com/Download?buildid=O9ucpbS1bK0~
http://secunia.com/advisories/24944
http://securityreason.com/securityalert/2610
http://www.securityfocus.com/archive/1/466212/100/0/threaded
http://www.securityfocus.com/bid/23556
http://www.securitytracker.com/id?1017932
http://www.vupen.com/english/advisories/2007/1455
http://www.zerodayinitiative.com/advisories/ZDI-07-015.html
http://download.novell.com/Download?buildid=8RF83go0nZg~
http://download.novell.com/Download?buildid=O9ucpbS1bK0~
http://secunia.com/advisories/24944

Get alerted when CVE-2007-2171 or the next vulnerability affects your stack