Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Novell GroupWise 8.0 can run code from email calendar

CVE-2011-2662 · published 15 years ago
Summary

The GroupWise Internet Agent in Novell GroupWise 8.0 can be tricked by a specially crafted calendar attachment in an email. An attacker could send such an email and cause the software to execute unexpected code on the server. Apply the latest patch from Novell or upgrade to a newer version to close the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
novell groupwise 8.0
cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*
Original advisory text
Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE v...
Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
4% chance of attack within 30 days
Type
CWE-189Numeric Errors
Timeline
Published8 Oct 2011
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2011-2662 · NVD
Track software like this
Free during beta