Novell GroupWise Internet Agent Yearly RRULE Variable Parsing Remote Code Execution Vulnerability
Publish Date: 21 luglio 2015
Gravità: : Critico
Identificatori CVE: CVE-2011-2663
Data notifica: 21 luglio 2015
Descrizione
Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.
Informazioni esposizione:
Apply associated Trend Micro DPI Rules.
Soluzioni
Trend Micro Deep Security DPI Rule Number: 1004811
Trend Micro Deep Security DPI Rule Name: 1004811 - Novell GroupWise Internet Agent Yearly RRULE Variable Parsing Remote Code Execution Vulnerability
Software e versione interessati:
- novell groupwise 8.0