Novell GroupWise Client Local Integer Overflow Vulnerability

Bugtraq ID:	14952
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 27 2005 12:00AM
Updated:	Sep 27 2005 12:00AM
Credit:	Discovery is credited to Francisco Amato.
Vulnerable:	Novell Groupwise 6.5.3
Not Vulnerable:	Novell Groupwise 6.5 SP5

Novell GroupWise Client Local Integer Overflow Vulnerability

Novell GroupWise Client is prone to a local integer overflow vulnerability.

The attacker may leverage this issue to corrupt process memory, which may lead to a crash or arbitrary code execution. A complete compromise of the affected system may be possible.

GroupWise 6.5.3 is reported to be vulnerable. It is possible that other versions are affected as well.

Novell GroupWise Client Local Integer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

The following value is sufficient to trigger this issue:
11111111111111111111111111111111

Novell GroupWise Client Local Integer Overflow Vulnerability

Solution:
Novell has released GroupWise 6.5 SP5 to address this issue. Please see the referenced Novell advisory (TID2972191) for more information.

Novell GroupWise Client Local Integer Overflow Vulnerability

References:

• Novell GroupWise Homepage (Novell)
  
• TID2972191 - GroupWise 6.5 SP5 Client rev 9 (Novell)