CVE-2009-0410

CRITICAL 10.0CVE-2009-0410 · Published 03/02/2009 · updated 16/06/2026

In short

CVE-2009-0410 is a CRITICAL (CVSS 10.0) vulnerability affecting groupwise (novell).
Chance of exploitation in the next 30 days (EPSS): 9.7%, higher than 95.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
groupwise novell	`= 6.5= 7.0= 7.01= 7.02x= 7.03= 8.0`	No fix yet

Description

Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.

References

download.novell.com/Download · Patch
secunia.com/advisories/33744 · Vendor Advisory
novell.com/support/viewContent.do · Vendor Advisory
securityfocus.com/archive/1/500609/100/0/threaded
securityfocus.com/bid/33560
zerodayinitiative.com/advisories/ZDI-09-010 · Patch

More vulnerabilities in groupwise

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

groupwise

novell

= 6.5= 7.0= 7.01= 7.02x= 7.03= 8.0

No fix yet

More vulnerabilities in groupwise

See all →