CVE-2009-0410

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-02-03 · updated 2026-06-16
Weakness: CWE-119

Description

Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.

Affected products

Novell GroupWise: 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03-hp1a (+1)

References

http://download.novell.com/Download?buildid=GjZRRdqCFW0
http://secunia.com/advisories/33744
http://www.novell.com/support/viewContent.do?externalId=7002502
http://www.securityfocus.com/archive/1/500609/100/0/threaded
http://www.securityfocus.com/bid/33560
http://www.zerodayinitiative.com/advisories/ZDI-09-010/
http://download.novell.com/Download?buildid=GjZRRdqCFW0
http://secunia.com/advisories/33744
http://www.novell.com/support/viewContent.do?externalId=7002502
http://www.securityfocus.com/archive/1/500609/100/0/threaded
http://www.securityfocus.com/bid/33560
http://www.zerodayinitiative.com/advisories/ZDI-09-010/

Get alerted when CVE-2009-0410 or the next vulnerability affects your stack