Novell GroupWise Messenger HTTP response handling buffer overflow

Added: 07/07/2008 CVE: CVE-2008-2703 BID: 29602 OSVDB: 46041 Background GroupWise Messenger is an instant messaging client for Novell GroupWise. Problem Novell GroupWise is affected by a buffer overflow vulnerability which could allow command execution when the client program processes specially...

Novell GroupWise Messenger Client Buffer Overflow

This module exploits a stack buffer overflow in Novell's GroupWise Messenger Client. By sending a specially crafted HTTP response, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2008-2703

creationtimestamp| type| source ---|---|--- 2008-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31889 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16814 2018-05-29 15:50:33+00:00| seen|...

CVE-2008-2703

Summary (CVE-2008-2703) : A stack-based buffer overflow in Novell GroupWise Messenger Client for Windows (pre-2.0.3 HP1) allows remote code execution via crafted HTTP responses. The overflow is triggered by spoofed server responses that place a long string after the NM_A_SZ_TRANSACTION_ID field n...