Novell Groupwise Client 7.0.3.1294 - ActiveX Denial of Service (PoC)

Novell Groupwise Client 7.0.3.1294 - ActiveX Denial of Service PoC Application: Novell Groupwise Client 7.0.3.1294 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introductio...

Novell Groupwise Client 7.0.3.1294 - ActiveX Denial of Service (PoC)

Application: Novell Groupwise Client 7.0.3.1294 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1...

Novell Groupwise Client 7.0.3.1294 ActiveX Denial of Service PoC

Exploit for unknown platform in category dos / poc ================================================================ Novell Groupwise Client 7.0.3.1294 ActiveX Denial of Service PoC ================================================================ Application: Novell Groupwise Client 7.0.3.1294...

[SECURITY] Fedora 10 Update: pidgin-2.6.0-1.fc10

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

[SECURITY] Fedora 10 Update: pidgin-2.5.6-1.fc10

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Novell GroupWise Internet Agent < 7.03 HP3 / 8.0 HP2 Multiple Buffer Overflows

A vulnerable version of GroupWise Internet Agent is running on the remote host. The software contains unspecified buffer overflow vulnerabilities that are triggered when processing email addresses and other specially crafted SMTP requests. This could allow a remote attacker to crash the service o...

Novell GroupWise Internet Agent Detection

Novell GroupWise Internet Agent GWIA is installed on the remote host. GWIA is part of the GroupWise suite, and is used for sending and receiving messages over the Internet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38971; scriptversion"1.15";...

Novell Groupwise fails to properly sanitize emails.

Affected product ---------------- Novell Groupwise webaccess Affected software: 7.x and 8.0 Vulnerability details --------------------- Groupwise WebAccess implements a security parser designed to prevent embedded scripts in HTML emails from executing in the users's browser. Unfortunately this...

Novell GroupWise WebAccess crossite scripting

Multiple crossite scripting and request forgery vulnerabilities...

Novell GroupWise WebAccess Login Page User.lang Parameter XSS

The remote host is running Novell GroupWise WebAccess, which is vulnerable to a cross-site scripting issue in the 'User.lang' field of the login page. There are other issues known to be associated with this version of GroupWise WebAccess that Nessus has not tested for. Refer to the Secunia adviso...

CVE-2009-1634

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors...

CVE-2009-1636

Multiple buffer overflows in the Internet Agent aka GWIA component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via 1 a crafted e-mail address in an SMTP session or 2 an SMTP command...

Buffer overflow

Multiple buffer overflows in the Internet Agent aka GWIA component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via 1 a crafted e-mail address in an SMTP session or 2 an SMTP command...

Session fixation

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors...

CVE-2009-1636

CVE-2009-1636 affects Novell GroupWise Internet Agent (GWIA). The vulnerability is in GWIA’s handling of SMTP traffic, where a crafted e-mail address or SMTP command can trigger a stack buffer overflow, enabling remote code execution. Affected versions are GroupWise 7.x before 7.03 HP3 and 8.x be...

CVE-2009-1634

The CVE-2009-1634 affects the WebAccess component in Novell GroupWise 7.x (before 7.03 HP3) and 8.x (before 8.0 HP2). It arises from improper session management, allowing remote attackers to gain access to user accounts via unspecified vectors. According to NVD, the vulnerability has CVSSv2 base ...