What’s Vulnerable › Vulnerabilities

CVE-2012-0271

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 17.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-09-19 · updated 2026-06-16
• Weakness: CWE-189

Description

Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header.

Affected products

• Novell GroupWise: 8.0, 8.01, 8.01-hp, 8.02, 8.02-hp1, 8.02-hp2 (+37)

References

• http://osvdb.org/85426
• http://www.novell.com/support/kb/doc.php?id=7010769
• http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=61&Itemid=61
• https://bugzilla.novell.com/show_bug.cgi?id=746199
• http://osvdb.org/85426
• http://www.novell.com/support/kb/doc.php?id=7010769
• http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=61&Itemid=61
• https://bugzilla.novell.com/show_bug.cgi?id=746199

Get alerted when CVE-2012-0271 or the next vulnerability affects your stack