CVE-2009-0410: Novell Groupwise

High severity, CVSS 10.0. EPSS: 9.7% chance of exploitation in the next 30 days.

Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.

Affected products

• Novell Groupwise: version 6.5 only; version 7.0 only; version 7.01 only; version 7.02x only; version 7.03 only; version 8.0 only

Published 2009-02-03. Last modified 2026-06-16.