Novell GroupWise

ソフト名：Novell GroupWise 8.0.2 HP2 (Oracle Outside In Technology 8.3.2.0/8.3.5.0)

回避策：8.02 Hot Patch 3以降へのアップデートにて対応

脆弱性：XSS, DoS攻撃, システムアクセス, スクリプト挿入攻撃, 整数切り捨てエラー, バッファオーバーフロー, リモートコード実行, バウンダリエラー, 不正HTMLの挿入, 不特定のエラー, クラッシュ

ソース：

http://www.novell.com/products/groupwise/

http://secunia.com/secunia_research/2011-66/

http://secunia.com/secunia_research/2011-67/

http://www.novell.com/support/viewContent.do?externalId=7009208

http://www.novell.com/support/viewContent.do?externalId=7009210

http://www.novell.com/support/viewContent.do?externalId=7009214

http://www.novell.com/support/viewContent.do?externalId=7006378

http://www.novell.com/support/viewContent.do?externalId=7009212

http://www.novell.com/support/viewContent.do?externalId=7009215

http://www.novell.com/support/viewContent.do?externalId=7009216

http://www.novell.com/support/viewContent.do?externalId=7009207

http://www.novell.com/support/viewContent.do?externalId=7009213

http://secunia.com/advisories/44295/

http://secunia.com/advisories/45297/

http://secunia.com/advisories/43513/

http://dvw-j.blogspot.com/2011/04/oracle-outside-in-technology.html

http://dvw-j.blogspot.com/2011/07/oracle-outside-in-technology.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4325

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0333

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0334

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2218

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2219

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2661

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2662

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2663

CVE：CVE-2010-4325, CVE-2011-0333, CVE-2011-0334, CVE-2011-2218, CVE-2011-2219, CVE-2011-2661, CVE-2011-2662, CVE-2011-2663

危険性：High Risk