Novell GroupWise WebAccess Arbitrary File Download

The installed version of GroupWise WebAccess fails to perform sufficient validation on a user specified file name supplied via 'filename' parameter before returning the contents of the file. By supplying directory traversal strings such as '../' in a specially crafted 'GET' request, it may be...

Novell GroupWise WebAccess Arbitrary File Download (local check)

The installed version of GroupWise WebAccess fails to perform sufficient validation on a user specified file name supplied via the 'filename' parameter before returning the contents of the file. By supplying directory traversal strings such as '../' in a specially crafted 'GET' request, it may be...

GroupWise Internet Agent < 8.0.2 HP1 Multiple Flaws

The version of GroupWise Internet Agent installed on the remote host is older than 8.0.2.11941 and hence affected by the following issues : - Multiple 'Content-Type' header parsing issues can result in arbitrary code execution on the remote system. ZDI-10-237 / ZDI-10-238 / ZDI-10-241 - Multiple...

Novell GroupWise WebAccess Accessible

The remote web server is a Novell GroupWise WebAccess console. By allowing unauthenticated access to this web server, anyone may be able read status, configuration or log files pertaining to GroupWise WebAccess. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50693;...

Novell GroupWise Document Viewer Agent Arbitrary File Download

The installed version of GroupWise Document Viewer agent fails to perform sufficient validation on a user specified file name supplied to 'filename' parameter before returning the contents of the file. By supplying directory traversal strings such as '../' in a specially crafted 'GET' request, it...

Preemptive Protection against Novell GroupWise Internet Agent IMAP Service Stack Buffer Overflow

A buffer overflow vulnerability exists in Novell GroupWise Internet Agent. Novell GroupWise Internet Agent is a component of Novell GroupWise and provides email services, supporting SMTP, POP, and IMAP protocols. The vulnerability resides in the IMAP component of the GroupWise Internet Agent...

Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution

Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis Provencher Protek Research Lab's WebSite:...

Novell Groupwise Internet Agent IMAP LIST LSUB Code Execution

Exploit for linux platform in category dos / poc ===================================================================== Novell Groupwise Internet Agent IMAP LIST LSUB Command Code Execution ===================================================================== Application: Novell Groupwise Internet...

Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution

Application: PRL Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability Platforms: Linux Exploitation: Remote code execution CVE Number: Pending Novell TID: 7007151 ZeroDayInitiative: ZDI-10-242 Author: Francis Provencher Protek Research Lab's Blog:...

Novell Groupwise Internet Agent IMAP LIST Command Code Execution

Exploit for linux platform in category dos / poc ======================================================================= Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution ======================================================================= Application: PRL Novell Groupwis...

Novell Groupwise GWPOA HTTP Request Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise. Authentication is not required to exploit this vulnerability. The specific flaw exists in a function responsible for assembling an HTTP response. The following modules implement...

Novell Groupwise Internet Agent - IMAP LIST LSUB Remote Code Execution

Novell Groupwise Internet Agent - IMAP LIST LSUB Remote Code Execution Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis...

Novell Groupwise Internet Agent - IMAP LIST Remote Code Execution

Novell Groupwise Internet Agent - IMAP LIST Remote Code Execution Application: PRL Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability Platforms: Linux Exploitation: Remote code execution CVE Number: Pending Novell TID: 7007151 ZeroDayInitiative: ZDI-10-242 Autho...

Novell Groupwise Internet Agent - IMAP 'LIST LSUB' Remote Code Execution

Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis Provencher Protek Research Lab's WebSite:...

Novell Groupwise Internet Agent - IMAP 'LIST' Remote Code Execution

Application: PRL Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability Platforms: Linux Exploitation: Remote code execution CVE Number: Pending Novell TID: 7007151 ZeroDayInitiative: ZDI-10-242 Author: Francis Provencher Protek Research Lab's Blog:...

Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise Internet Agent. Authentication is not required to exploit this vulnerability. The flaw exists within the IMAP server component which listens by default on TCP port 143. When handli...

Novell GroupWise Internet Agent TZNAME Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwwww1.dll module responsible for parsing VCALENDAR data within e-mail messages...

Novell GroupWise Internet Agent Content-Type Multiple Value Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwia.exe module responsible for parsing e-mail messages received by the server...

Novell GroupWise Internet Agent Content-Type String Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwia.exe module responsible for parsing e-mail messages received by the server...

Novell Groupwise 8.0 - Multiple Remote Vulnerabilities

Novell Groupwise 8.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/44732/info Novell GroupWise is prone to multiple security vulnerabilities, including multiple remote code-execution vulnerabilities, an information-disclosure issue, and a cross-site scripting issue...