CVE-2010-4717: Novell Groupwise

Medium severity, CVSS 6.5. EPSS: 9.9% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long (1) LIST or (2) LSUB command.

Affected products

• Novell Groupwise: up to and including 8.0.2; version 4.1 only; version 4.1a only; version 5.0 only; version 5.1 only; version 5.2 only; …

Published 2011-01-31. Last modified 2026-06-16.