CVE-2008-2704

The CVE concerns Novell GroupWise Messenger (GWIM) Client prior to Version 2.0.3 Hot Patch 1, where a long user ID (or crafted server responses) can cause a remote crash (DoS). The issue originates from GWIM’s handling of long IDs and/or certain server responses, and is documented as potentially ...

CVE-2008-2703: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Novell GroupWise Messenger GWIM Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NMASZTRANSACTIONID field name...

CVE-2008-2704: Improper Input Validation

Novell GroupWise Messenger GWIM before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service crash via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries...