CVE-2016-5762 Integer overflow in n/a
Remote attackers can execute arbitrary code via a heap-based buffer overflow triggered by integer overflow in the Post Office Agent.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5762?
CVE-2016-5762 is a critical vulnerability in Novell Groupwise, published on 20 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow.
Weakness: CWE-190
Which versions are affected by CVE-2016-5762?
It affects 1 product.
Products include Novell Groupwise.
How do I fix CVE-2016-5762?
No fix has been published for CVE-2016-5762 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5762 being exploited?
There is no known exploitation of CVE-2016-5762 in the wild and no public exploit code.
Other vulnerabilities in Novell Groupwise
Sources
Also known as GHSA-8g79-27jh-fr2j.