Unrated severityNVD Advisory· Published Feb 3, 2009· Updated Apr 23, 2026
CVE-2009-0410
CVE-2009-0410
Description
Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.
Affected products
7cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*
- cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*
- cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*
- cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*
- cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- download.novell.com/DownloadnvdPatch
- www.zerodayinitiative.com/advisories/ZDI-09-010/nvdPatch
- secunia.com/advisories/33744nvdVendor Advisory
- www.novell.com/support/viewContent.donvdVendor Advisory
- www.securityfocus.com/archive/1/500609/100/0/threadednvd
- www.securityfocus.com/bid/33560nvd
News mentions
0No linked articles in our index yet.