The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap me…

published 2012-03-02 14 y ago modified 2026-06-16 4 mo ago also EUVD-2011-4132

cvss: 7.5; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 11.5%; EPSS 11.5% chance of exploitation in 30 days, percentile 96%
public exploits: 1; Exploit-DB

The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file.

Timeline

2012-03-01 First public exploit (EDB-18546)
2012-03-02 Published

Exploit prediction

11.46% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

EDB-18546 Novell Groupwise - Address Book Remote Code Execution dos, 2012-03-01
protekresearchlab.com http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=37&Itemid=37 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness

CWE-94 Improper Control of Generation of Code

References

protekresearchlab.com /index.php?option=com_content&view=article&id=37&Itemid=37
exploit
novell.com /support/viewContent.do?externalId=7010205
vendor-advisory
osvdb.org /79720
vdb-entry
exchange.xforce.ibmcloud.com /vulnerabilities/73588
vdb-entry
bugzilla.novell.com /show_bug.cgi?id=733885
securityfocus.com /bid/52233
vdb-entry
secunia.com /advisories/48199
third-party-advisory
securitytracker.com /id?1026753
vdb-entry

Sources

CVE List CVE-2011-4189
NVD CVE-2011-4189

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary