Novell GroupWise Internet Agent Yearly RRULE Variable Parsing Remote Code Execution Vulnerability
Publish date: 21 de julio de 2015
Gravedad: Crítico
Identificadores de CVE : CVE-2011-2663
Fecha recomendada: 21 de julio de 2015
Descripción
Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.
Revelación de la información
Apply associated Trend Micro DPI Rules.
Soluciones
Trend Micro Deep Security DPI Rule Number: 1004811
Trend Micro Deep Security DPI Rule Name: 1004811 - Novell GroupWise Internet Agent Yearly RRULE Variable Parsing Remote Code Execution Vulnerability
Software y versión afectados
- novell groupwise 8.0