CVE-2009-1636: novell groupwise

Modified

Published 26-05-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-1636 is a high (CVSS 10.0) vulnerability in novell groupwise. EPSS estimates a 8.43% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

8.43%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

26-05-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

8.43%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

No change 0.00 pp

From 8.43% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Novell1 product

groupwise7.0 | 7.0:sp1 | 7.0:sp2 | 7.0:sp3 | 7.0.0:sp1 | 7.0.0:sp2 | 7.0.2 | 7.0.3 | 7.0.1 | 7.03:hp1a | 7.03:hp2 | 8.0:hp1

1 vendor · 1 product

References

16 links

www.vupen.com/english/advisories/2009/1393VDB EntryX Refsource VUPENVendor Advisory
bugzilla.novell.com/show_bug.cgi?id=482914X Refsource MISC
www.vupen.com/exploits/…X Refsource MISCVendor Advisory
secunia.com/advisories/35177Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/35064VDB EntryX Refsource BID
osvdb.org/54644VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/50693VDB EntryX Refsource XF
www.securitytracker.com/id?1022276VDB EntryX Refsource SECTRACK
bugzilla.novell.com/show_bug.cgi?id=478892X Refsource MISC
www.vupen.com/exploits/…X Refsource MISCVendor Advisory

Show all 16 references

www.securityfocus.com/bid/35065VDB EntryX Refsource BID
www.securityfocus.com/archive/1/503724/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/50692VDB EntryX Refsource XF
osvdb.org/54645VDB EntryX Refsource OSVDB
www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1X Refsource CONFIRM
www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1X Refsource CONFIRMVendor Advisory