CVE-2007-2171
- State
- Published
- Severity
- Not scored
- Published
- Apr 24, 2007
- Updated
- Aug 7, 2024
- Reserved
- Apr 22, 2007
Description
Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://download.novell.com/Download?buildid=8RF83go0nZg~
- ADV-2007-1455vdb-entry
- 1017932vdb-entry
- 24944third-party-advisory
- http://download.novell.com/Download?buildid=O9ucpbS1bK0~
- http://www.zerodayinitiative.com/advisories/ZDI-07-015.html
- 23556vdb-entry
- 20070418 ZDI-07-015: Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerabilitymailing-list
- 2610third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.