CVE-2016-5762
CriticalSummary
Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long username or password, triggering a heap-based buffer overflow.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code remotely, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to upgrade to version 2014 R2 Service Pack 1 Hot Patch 1 or later to mitigate this vulnerability.
Original NVD description (English source)
Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow.