CVE-2007-6435

Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail...

CVE-2007-6435

CVE-2007-6435 is a stack-based buffer overflow in the Novell GroupWise Client triggered when processing HTML emails containing a crafted IMG SRC attribute. The vulnerability requires the HTML Preview feature and user action (reply/forward) to exploit, enabling remote code execution on vulnerable ...

CVE-2007-6435

Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail...

Novell Groupwise client buffer overflow

Buffer overflow on oversized SRC property of IMG tag...

[ISR] - Novell Groupwise client remote stack overflow silently patched.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 || ISR || || Infobyte Security Research || www.infobyte.com.ar || 12.14.2007 || .:: SUMMARY Novell GroupWise Client Remote Stack Overflow Version: GroupWise 6.5.6, It is suspected that all previous versions of Groupwise Client are vulnerable. .::...

SuSE 10 Security Update : Novell GroupWise client (ZYPP Patch Number 4494)

This update fixes a security vulnerability in the GroupWise system that allows a malicious user to intercept authentication credentials through a 'man in the middle' attack. CVE-2007-5195 / CVE-2007-5196 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

CVE-2007-5196

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5195...

CVE-2007-5195

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

Code injection

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

Code injection

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5195...

CVE-2007-5196

CVE-2007-5196 affects SUSE Linux Enterprise Desktop 10 via the GroupWise client (novell-groupwise-client). The vulnerability lies in the SSL implementation and can allow remote attackers to obtain credentials through a man-in-the-middle attack. The issue is addressed by a SUSE security update (ZY...

CVE-2007-5195

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

CVE-2007-5196

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5195...

CVE-2007-5195

This CVE refers to an unspecified vulnerability in the SSL implementation of the GroupWise client (novell-groupwise-client) for SUSE Linux Enterprise Desktop 10 that allows remote attackers to obtain credentials via a man-in-the-middle attack (CVE-2007-5195 and related CVE-2007-5196). The connect...

CVE-2007-4557

Cross-site scripting XSS vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for...

Cross site scripting

Cross-site scripting XSS vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for...

CVE-2007-4557

CVE-2007-4557 is an XSS vulnerability in the Novell GroupWise 6.5 WebAccess webacc servlet. The issue allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, demonstrated by a URL within a STYLE element. The description notes this may be due to an incomplete fix ...

CVE-2007-4557

Cross-site scripting XSS vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for...

Novell Groupwise 6.5 Webaccess - User.Id Cross-Site Scripting

Novell Groupwise 6.5 Webaccess - User.Id Cross-Site Scripting source: https://www.securityfocus.com/bid/25126/info Novell GroupWise WebAccess is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an...

Novell Groupwise 6.5 Webaccess - 'User.Id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25126/info Novell GroupWise WebAccess is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting...