CVE-2008-2704

Novell GroupWise Messenger GWIM before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service crash via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2008-2703

Multiple stack-based buffer overflows in Novell GroupWise Messenger GWIM Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NMASZTRANSACTIONID field name...

CVE-2008-2704

The CVE concerns Novell GroupWise Messenger (GWIM) Client prior to Version 2.0.3 Hot Patch 1, where a long user ID (or crafted server responses) can cause a remote crash (DoS). The issue originates from GWIM’s handling of long IDs and/or certain server responses, and is documented as potentially ...

Novell GroupWise Messenger客户端远程栈溢出漏洞

BUGTRAQ ID: 29602 Novell GroupWise Messenger是一款基于GroupWise平台的即时交流工具。 GroupWise Messenger客户端在处理服务端的回应数据时存在漏洞，如果恶意的服务器向GroupWise Messenger客户端请求回复了特制响应的话，就可能触发栈溢出，导致执行任意指令。 Novell GroupWise Messenger 2.0.3 Novell GroupWise Messenger 2.0 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Novell GroupWise Messenger Client < 2.0.3 HP1 Multiple Remote Overflows

The remote host is running GroupWise Messenger Client from Novell. The installed version is affected by multiple buffer overflow vulnerabilities. By sending specially crafted spoofed server responses to valid client requests, it may be possible to execute arbitrary code within the context of the...

CVE-2008-2069

Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI...

DSquare Exploit Pack: D2SEC_GW7

Name| d2secgw7 ---|--- CVE| CVE-2008-2069 Exploit Pack| D2ExploitPack Description| Novell GroupWise mailto URI Handler Stack Overflow Notes|...

Buffer overflow

Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI...

CVE-2008-2069

Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI...

CVE-2008-2069

CVE-2008-2069 affects Novell GroupWise 7, where a buffer overflow in the mailto: URI handler allows remote attackers to cause a denial of service or execute arbitrary code. The vulnerability is triggered by a long argument in a mailto: URI, with public references noting exploitation in exploit pa...

Novell GroupWise mailto URI处理器缓冲区溢出漏洞

BUGTRAQ ID: 28969 Novell GroupWise是一款跨平台协作软件。 GroupWise处理超长的mailto URL时存在漏洞，如果用户将GroupWise设置为默认的邮件客户端的话，则跟随了超长mailto URI就可以触发缓冲区溢出，导致执行任意指令。 Novell Groupwise 7 Novell ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.novell.com/security-alerts...

Novell GroupWise HTML注入及拒绝服务漏洞

BUGTRAQ ID: 28944 Novell GroupWise是一款跨平台协作软件。 GroupWise客户端处理畸形JPG文件时存在漏洞，如果用户受骗使用GroupWise客户端打开了带有恶意JPG文件的附件的话，就可能导致注入并执行JavaScript代码；如果所打开的附件文件名中字符超过了所允许的最多字符数的话，还可能导致拒绝服务的情况。 Novell Groupwise 7 Novell ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.novell.com/security-aler...

GroupWise 7.0 (mailto: scheme) Buffer Overflow PoC

No description provided by source. PRODUCT: GroupWise 7.0 OS: Windows Xp The scheme "mailto" is vulnerable if one takes as default mail client to GroupWise, the fault is to implement the scheme followed by an extensive argument and this causes the buffer overflow. This brings the consequence that...

Groupwise 7.0 - mailto: scheme Buffer Overflow (PoC)

Groupwise 7.0 - mailto: scheme Buffer Overflow PoC PRODUCT: GroupWise 7.0 OS: Windows Xp The scheme "mailto" is vulnerable if one takes as default mail client to GroupWise, the fault is to implement the scheme followed by an extensive argument and this causes the buffer overflow. This brings the...

GroupWise 7.0 (mailto: scheme) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================== GroupWise 7.0 mailto: scheme Buffer Overflow PoC ================================================== PRODUCT: GroupWise 7.0 OS: Windows Xp The scheme "mailto" is vulnerable if one takes as default...

Novell Groupwise buffer overflow

Buffer overflow on mailto: URI parsing...

GroupWise 7.0 mailto: scheme buffer overflow

PRODUCT: GroupWise 7.0 OS: Windows Xp The scheme "mailto" is vulnerable if one takes as default mail client to GroupWise, the fault is to implement the scheme followed by an extensive argument and this causes the buffer overflow. This brings the consequence that can overwrite the EIP and is able ...

Groupwise 7.0 - 'mailto: scheme' Buffer Overflow (PoC)

PRODUCT: GroupWise 7.0 OS: Windows Xp The scheme "mailto" is vulnerable if one takes as default mail client to GroupWise, the fault is to implement the scheme followed by an extensive argument and this causes the buffer overflow. This brings the consequence that can overwrite the EIP and is able ...

GroupWise 7 attached bugs

Product: GroupWise 7 OS: Windows xp Find two types of vulnerabilities in this client is a correo.Una xss and the other a denial of service but I am also appears to be run arbitrary code. XSS in web access You can run Javascript code to send an attachment with poorly trained jpg extension. Denial ...

Novell Groupwise 7.0 - HTML Injection Denial of Service

Novell Groupwise 7.0 - HTML Injection Denial of Service source: https://www.securityfocus.com/bid/28944/info Novell GroupWise is prone to an HTML-injection vulnerability and a denial-of-service vulnerability. By exploiting the HTML-injection vulnerability, attackers can execute HTML and script co...