← back
CVE-2007-2171

CVE-2007-2171

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 24%
exploitation probability
24%top 2% of all CVEs
observed exploitation
nono source reports it
Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.
Affected products
n/a · n/a
References
http://download.novell.com/Download?buildid=8RF83go0nZg~http://download.novell.com/Download?buildid=O9ucpbS1bK0~http://secunia.com/advisories/24944http://securityreason.com/securityalert/2610http://www.securityfocus.com/archive/1/466212/100/0/threadedhttp://www.securityfocus.com/bid/23556http://www.securitytracker.com/id?1017932http://www.vupen.com/english/advisories/2007/1455http://www.zerodayinitiative.com/advisories/ZDI-07-015.html