924 matches found
Novell Messenger Server 2.0 (Accept-Language) Remote Overflow Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Novell Messenger Server 2.0 - 'Accept-Language' Remote Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Novell Messenger Server 2.0 (Accept-Language) Remote Overflow Exploit
Exploit for novell platform in category remote exploits ===================================================================== Novell Messenger Server 2.0 Accept-Language Remote Overflow Exploit ===================================================================== This file is part of the Metasplo...
CVE-2006-0992
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the...
Immunity Canvas: GROUPWISE_MESSENGER
Name| groupwisemessenger ---|--- CVE| CVE-2006-0992 Exploit Pack| CANVAS Description| Groupwise Messenger 2 Buffer Overflow Notes| CVE Name: CVE-2006-0992 VENDOR: Novell Repeatability: You get one shot Date public: 2006-04-13 CVE Url: https://vulners.com/cve/CVE-2006-0992 CVSS: 10.0...
Stack overflow
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the...
CVE-2006-0992
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the...
CVE-2006-0992
CVE-2006-0992 is a stack-based buffer overflow in Novell GroupWise Messenger Server v2.0 (Public Beta 2) triggered by an Accept-Language HTTP header longer than 16 bytes, allowing unauthenticated remote code execution with SYSTEM privileges. The vulnerability stems from an overflow when processin...
Novell GroupWise Messenger buffer overflow
TC/8300 HTTP request oversized Accept-Language header buffer overflow...
Novell GroupWise Messenger Accept-Language Buffer Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Novell GroupWise Messenger. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Novell Messaging Agent, a web server that listens by default on TCP port...
[Full-disclosure] ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow
ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-06-008.html April 13, 2006 -- CVE ID: CVE-2006-0092 -- Affected Vendor: Novell -- Affected Products: Novell GroupWise Messenger 2 -- TippingPointTM IPS Customer Protection:...
Buffer overflow
Buffer overflow in BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow...
CVE-2006-0761
Buffer overflow in BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow...
Corrupt Word file may cause buffer overflow in the Blackberry Attachment Service
From Research in Motion's KB-04791 sorry, long link: http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/8149/8052/Support-CorruptWordfilemaycausebufferoverflowintheBlackBerryAttachmentService.html?nodeid=1181753&vernum=2 Applies to: BlackBerry Enterprise Server® 2.2 and...
CVE-2006-0092
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-0992, CVE-2006-0158. Reason: this candidate was intended for one issue, but a typo caused it to be associated with a Novell/Groupwise issue. In addition, this issue was a duplicate of a SiteSuite issue that was also assigned...
CVE-2006-0092
CVE-2006-0092 is rejected/not used and does not represent an active vulnerability entry.
Novell Groupwise Servlet Manager default password
The Novell Groupwise servlet server is configured with the default password. As a result, users could be denied access to mail and other servlet based resources. To test this finding: https:///servlet/ServletManager/ enter 'servlet' for the user and 'manager' for the password. OpenVAS Vulnerabili...
GroupWise Web Interface 'HTMLVER' Information Disclosure Vulnerability
By modifying the GroupWise Web Interface HTMLVER URL request, it is possible to gain additional information on the remote computer and even read local files from its hard drive SPDX-FileCopyrightText: 2002 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are...
GroupWise Web Interface 'HELP' Information Disclosure Vulnerability
By modifying the GroupWise Web Interface HELP URL request, it is possible to gain additional information on the remote computer and even read local files from its hard drive. SPDX-FileCopyrightText: 2002 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are...
Novell Groupwise WebAcc Information Disclosure
Novell Groupwise WebAcc Servlet is installed. This servlet exposes critical system information, and allows remote attackers to read any file. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...