Novell GroupWise Internet Agent e-mail address buffer overflow

Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...

[SECURITY] Fedora 10 Update: pidgin-2.5.6-1.fc10

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Novell GroupWise Internet Agent < 7.03 HP3 / 8.0 HP2 Multiple Buffer Overflows

A vulnerable version of GroupWise Internet Agent is running on the remote host. The software contains unspecified buffer overflow vulnerabilities that are triggered when processing email addresses and other specially crafted SMTP requests. This could allow a remote attacker to crash the service o...

Novell GroupWise Internet Agent Detection

Novell GroupWise Internet Agent GWIA is installed on the remote host. GWIA is part of the GroupWise suite, and is used for sending and receiving messages over the Internet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38971; scriptversion"1.15";...

Novell Groupwise fails to properly sanitize emails.

Affected product ---------------- Novell Groupwise webaccess Affected software: 7.x and 8.0 Vulnerability details --------------------- Groupwise WebAccess implements a security parser designed to prevent embedded scripts in HTML emails from executing in the users's browser. Unfortunately this...

Novell GroupWise WebAccess crossite scripting

Multiple crossite scripting and request forgery vulnerabilities...

Novell GroupWise WebAccess Login Page User.lang Parameter XSS

The remote host is running Novell GroupWise WebAccess, which is vulnerable to a cross-site scripting issue in the 'User.lang' field of the login page. There are other issues known to be associated with this version of GroupWise WebAccess that Nessus has not tested for. Refer to the Secunia adviso...

CVE-2009-1634

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors...

CVE-2009-1636

Multiple buffer overflows in the Internet Agent aka GWIA component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via 1 a crafted e-mail address in an SMTP session or 2 an SMTP command...

Buffer overflow

Multiple buffer overflows in the Internet Agent aka GWIA component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via 1 a crafted e-mail address in an SMTP session or 2 an SMTP command...

Session fixation

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors...

CVE-2009-1634

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors...

CVE-2009-1636

CVE-2009-1636 affects Novell GroupWise Internet Agent (GWIA). The vulnerability is in GWIA’s handling of SMTP traffic, where a crafted e-mail address or SMTP command can trigger a stack buffer overflow, enabling remote code execution. Affected versions are GroupWise 7.x before 7.03 HP3 and 8.x be...

CVE-2009-1634

The CVE-2009-1634 affects the WebAccess component in Novell GroupWise 7.x (before 7.03 HP3) and 8.x (before 8.0 HP2). It arises from improper session management, allowing remote attackers to gain access to user accounts via unspecified vectors. According to NVD, the vulnerability has CVSSv2 base ...

CVE-2009-1636

Multiple buffer overflows in the Internet Agent aka GWIA component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via 1 a crafted e-mail address in an SMTP session or 2 an SMTP command...

Novell GroupWise buffer overflow

Novell GroupWise Internet Agent SMTP e-mail address buffer overflow...

Novell GroupWise Internet代理邮件地址处理缓冲区溢出漏洞

BUGTRAQ ID: 35064,35065 CVECAN ID: CVE-2009-1636 Novell GroupWise是一款跨平台协作软件。 Novell GroupWise Internet代理（GWIA）在通过SMTP处理特制邮件或处理特制的SMTP请求时存在多个缓冲区溢出漏洞。如果远程攻击者发送了带有超长地址字段的恶意邮件消息的话，就可以触发这些溢出，导致以SYSTEM权限执行任意指令。 Novell Groupwise 8.0 Novell Groupwise 7.0 厂商补丁： Novell ------...

Novell GroupWise Internet Agent Remote Buffer Overflow Vulnerabilities

VUPEN Security Research Advisory - VUPEN-SR-2009-01 // VUPEN-SR-2009-02 Advisory URL: http://www.vupen.com/english/advisories/2009/1393 May 22, 2009 I. BACKGROUND ---------------------- Novell GroupWise is a complete collaboration software solution that provides information workers with e-mail,...

CVE-2009-1762

Multiple cross-site scripting XSS vulnerabilities in the WebAccess login page aka gw/webacc in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the 1 GWAP.version or 2 User.Theme aka User.Theme.index parameter...

CVE-2009-1635

Multiple cross-site scripting XSS vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via 1 the User.lang parameter to the login page aka gw/webacc, 2 style expressions in a message...