Novell GroupWise Client Remote Buffer Overflow Vulnerability

Bugtraq ID:	14398
Class:	Boundary Condition Error
CVE:	CVE-2005-2346
Remote:	Yes
Local:	No
Published:	Jul 27 2005 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	Discovery is credited to Francisco Amato.
Vulnerable:	Novell Groupwise 6.5.4 Novell Groupwise 6.5.3 Novell Groupwise 6.5.2 Novell Groupwise 6.5 SP4 Novell Groupwise 6.5 SP3 Novell Groupwise 6.5 SP2 Novell Groupwise 6.5 SP1 Novell Groupwise 6.5
Not Vulnerable:

Novell GroupWise Client Remote Buffer Overflow Vulnerability

Novell GroupWise Client is affected by a remote buffer overflow vulnerability.

Specifically, this vulnerability arises when a user attempts to log in to a GroupWise post office that contains a malicious 'GWVW02??.INI' file.

This can facilitate unauthorized access in the context of the user.

This issue affects all versions of Novell GroupWise 6.5 client dated prior to July 15, 2005.

Novell GroupWise Client Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell GroupWise Client Remote Buffer Overflow Vulnerability

Solution:
Novell has released Technical Information Documents TID10098314 and TID2971927 including GroupWise 6.5 SP5 Client rev 6 to address this issue. Please see the referenced documents for more information.

Novell GroupWise Client Remote Buffer Overflow Vulnerability

References:

• TID10098314 - Buffer overflow in client (Novell)
  
• TID2971927 - FTF: GroupWise 6.5 SP5 Client rev 6 EN Only (Novell)
  
• [ISR] - Novell GroupWise Client Remote Buffer Overflow (Francisco Amato )