Novell GroupWise WebAccess Arbitrary File Download (local check)

The installed version of GroupWise WebAccess fails to perform sufficient validation on a user specified file name supplied via the 'filename' parameter before returning the contents of the file. By supplying directory traversal strings such as '../' in a specially crafted 'GET' request, it may be...

CVE-2007-2171: Undefined Security Weakness

Stack-based buffer overflow in the base64decode function in GWINTER.exe in Novell GroupWise GW WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request...

Novell Groupwise WebAccess GWINTER.EXE Base64 Decoding Remote Overflow

The remote host is running a version of GroupWise WebAccess from Novell that is vulnerable to a stack overflow in the way it handles HTTP Basic Authentication. By sending a specially crafted request, an attacker can exploit this flaw to execute code on the remote host with administrative...

Novell Groupwise WebAccess GWINTER.EXE远程缓冲区溢出漏洞

Novell GroupWise是Novell基于WEB的应用服务程序。 Novell Groupwise WebAccess处理HTTP请求存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于监听TCP 7205和7211的GWINTER.exe进程中，在处理HTTP BASIC验证请求时，拷贝用户提供的BASE64数据到固定大小的堆栈缓冲区，发送至少336字节会由于调用有漏洞的base64decode调用而造成基于堆栈的缓冲区溢出，可以应用程序权限执行任意指令。 Novell Groupwise 7.0 Novell Groupwise 7.0.0 SP1...

Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists in the GWINTER.exe process bound by default on TCP ports 7205 and 7211. During the...