Novell Groupwise directory traversal

HTTP interface directory traversal...

Novell GroupWise Client 8.x < 8.0.3 / 2012.x < 2012 SP1 Unspecified File Handling Arbitrary Code Execution

The version of Novell GroupWise Client installed on the remote Windows host is 8.x earlier than 8.0.3 8.0.3.21955 or 2012.x earlier than 2012 SP1 12.0.1.13731. As such, it is reportedly affected by an unspecified code execution vulnerability. By tricking a user into opening a specially crafted...

Novell GroupWise WebAccess Detection

Novell GroupWise WebAccess, a component of the GroupWise suite that provides web-based remote access, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62415; scriptversion"1.7";...

Novell GroupWise WebAccess 8.x < 8.0.3 Multiple XSS Vulnerabilities

The version of Novell GroupWise installed on the remote Windows host is earlier than 8.0.3. It is, therefore, reportedly affected by multiple cross-site scripting vulnerabilities : - The application fails to sanitize user-supplied input to the 'merge' parameter of the 'Search Document' form...

Novell GroupWise Internet Agent Request Content-Length Header Parsing Remote Overflow

Binary data groupwiseiacve-2012-0271.nbin...

CVE-2012-4912

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an HTML e-mail message...

CVE-2012-0419

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request...

CVE-2012-0417

Integer overflow in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-0418

Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file...

Code injection

Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file...

Integer overflow

Integer overflow in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an HTML e-mail message...

CVE-2012-4912

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an HTML e-mail message...

CVE-2012-0419

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request...

CVE-2012-0418

Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file...

CVE-2012-0417

Integer overflow in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-0418

CVE-2012-0418 affects the Novell GroupWise client. Multiple connected sources describe an unspecified but exploitable remote code execution vulnerability in GroupWise 8.x (before 8.0.3/SP1 for 2012.x) triggered by opening a crafted file. CPAI-2014-2386 specifies a heap buffer overflow while parsi...

CVE-2012-0417

This CVE (CVE-2012-0417) concerns Novell GroupWise GroupWise Internet Agent (GWIA). The ZDI-12-196 advisory details a remote code execution vulnerability in the GWIA’s LDAP server (BER-encoded parameter handling on port 389). Specifically, parsing a BER chunk can cause an integer size wrap during...

CVE-2012-0419

CVE-2012-0419 describes a directory-traversal vulnerability in the HTTP interfaces of Novell GroupWise 8.0 (before Support Pack 3) and 2012 (before Support Pack 1), enabling remote attackers to read arbitrary files via crafted traversal sequences. Affected components include the GroupWise Post Of...