EUVD-2009-3834

Malware in sbrugna...

Novell GroupWise Client 7.0.3.1294 'gxmim1.dll' ActiveX Control Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36398/info Novell GroupWise Client is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attacke...

Novell GroupWise Client gwcls1.dll ActiveX Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Novell GroupWise Client 8.x < 8.0.3 Hot Patch 3 / 2012.x < 2012 SP2 XSS

The version of Novell GroupWise Client installed on the remote Windows host is 8.x prior to 8.0.3 Hot Patch 3 8.0.3.28711 or 2012.x prior to 2012 SP2 12.0.2.18211. It is, therefore, reportedly affected by a cross-site scripting vulnerability. C Tenable Network Security, Inc. include'compat.inc'; ...

Novell GroupWise Client gwcls1.dll ActiveX Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Novell Groupwise Client - 'gwcls1.dll' ActiveX Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Novell GroupWise Client 8.x < 8.0.3 Hot Patch 2 / 2012.x < 2012 SP1 Hot Patch 1 Multiple Vulnerabilities

The version of Novell GroupWise Client installed on the remote Windows host is 8.x prior to 8.0.3 Hot Patch 2 8.0.3.26516 or 2012.x prior to 2012 SP1 Hot Patch 1 12.0.1.16521. It is, therefore, reportedly affected by the following vulnerabilities : - An unspecified error exists related to an...

Novell Groupwise Client 8.0 - Multiple Remote Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/57657/info Novell Groupwise Client is prone to multiple remote code-execution vulnerabilities. A remote attacker can leverage this issue to execute arbitrary code within the context of the application. Successful exploits will compromise the application,...

Novell Groupwise Client DOCX Loader Relationship Id Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise Client. User interaction is required to exploit this vulnerability in that the target must open a malicious e-mail message. The specific flaw exists within the component responsibl...

Novell Groupwise Client ActiveX Control Buffer Overflow Vulnerability

This host is installed with Novell Groupwise Client ActiveX Control and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellgroupwiseclientactivexbofvuln.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell Groupwise Client ActiveX Control Buffer Overflow Vulnerability...

CVE-2009-3863

Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service application crash via a long argument to the SetFontFace method...

CVE-2009-3863

Summary: CVE-2009-3863 is a buffer overflow in the gxmim1.dll ActiveX control of Novell GroupWise Client 7.0.3.1294. An attacker can cause a remote denial of service (application crash) by sending a long argument to SetFontFace. The vulnerability is exploitable over the network with low attack co...

CVE-2009-3863: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service application crash via a long argument to the SetFontFace method...

Novell Groupwise Client 7.0.3.1294 ActiveX Denial of Service PoC

No description provided by source. Application: Novell Groupwise Client 7.0.3.1294 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3...

Novell Groupwise Client 7.0.3.1294 - 'gxmim1.dll' ActiveX Control Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/36398/info Novell GroupWise Client is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code in th...

Novell Groupwise Client 7.0.3.1294 ActiveX Denial of Service PoC

Exploit for unknown platform in category dos / poc ================================================================ Novell Groupwise Client 7.0.3.1294 ActiveX Denial of Service PoC ================================================================ Application: Novell Groupwise Client 7.0.3.1294...

CVE-2007-5196: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5195...

CVE-2007-5195: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

Novell Groupwise Client 6.5.3 - Local Integer Overflow

Novell Groupwise Client 6.5.3 - Local Integer Overflow source: https://www.securityfocus.com/bid/14952/info Novell GroupWise Client is prone to a local integer overflow vulnerability. The attacker may leverage this issue to corrupt process memory, which may lead to a crash or arbitrary code...

CVE-2005-2620: Undefined Security Weakness

grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory...