Novell GroupWise Multiple Remote Vulnerabilities
BID:44732
Info
Novell GroupWise Multiple Remote Vulnerabilities
| Bugtraq ID: | 44732 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2010 12:00AM |
| Updated: | Nov 09 2010 08:57PM |
| Credit: | Francis Provencher working with TippingPoint's Zero Day Initiative; Anonymous working with TippingPoint's Zero Day Initiative; Mehul Revanka; Pat Bergoch at Amerimark. |
| Vulnerable: |
Novell Groupwise 8.02 Novell Groupwise 8.01x Novell Groupwise 8.0 SP2 Novell Groupwise 8.0 SP1 Novell Groupwise 8.0 HP2 Novell Groupwise 8.0 HP1 Novell Groupwise 8.0 |
| Not Vulnerable: |
Novell Groupwise 8.02 HP2 |
Discussion
Novell GroupWise Multiple Remote Vulnerabilities
Novell GroupWise is prone to multiple security vulnerabilities, including multiple remote code-execution vulnerabilities, an information-disclosure issue, and a cross-site scripting issue.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, obtain potentially sensitive information, or execute arbitrary code in the context of the user running the affected application. Information harvested may aid in further attacks; other attacks are also possible.
Novell GroupWise is prone to multiple security vulnerabilities, including multiple remote code-execution vulnerabilities, an information-disclosure issue, and a cross-site scripting issue.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, obtain potentially sensitive information, or execute arbitrary code in the context of the user running the affected application. Information harvested may aid in further attacks; other attacks are also possible.
Exploit / POC
Novell GroupWise Multiple Remote Vulnerabilities
Attackers can likely use a browser to exploit some of these issues. For a cross-site scripting issue, an unsuspecting user must be enticed to follow a malicious link.
The following proof-of-concept is available:
Attackers can likely use a browser to exploit some of these issues. For a cross-site scripting issue, an unsuspecting user must be enticed to follow a malicious link.
The following proof-of-concept is available:
Solution / Fix
Novell GroupWise Multiple Remote Vulnerabilities
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
Novell GroupWise Multiple Remote Vulnerabilities
References:
References:
- Novell GroupWise Homepage (Novell)
- Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vul (Protek Research Lab's)
- GroupWise 8.0 SP2 HP1 Linux Full EN and MULTI (Novell)
- ZDI-10-237 Novell GroupWise Internet Agent Content-Type Multiple Value Parsing R (Zero Day Initiative)
- ZDI-10-238 Novell GroupWise Internet Agent Content-Type String Parsing Remote Co (Zero Day Initiative)
- ZDI-10-239 Novell GroupWise Internet Agent RRULE Parsing Remote Code Execution V (Zero Day Initiative)
- ZDI-10-240 Novell GroupWise Internet Agent COMMENT Parsing Remote Code Execution (Zero Day Initiative)
- ZDI-10-241Novell GroupWise Internet Agent Content-Type Parsing Integer Signednes (Zero Day Initiative)
- ZDI-10-242 Novell Groupwise Internet Agent IMAP LIST Command Remote Code Executi (Zero Day Initiative)
- ZDI-10-243 Novell GroupWise Internet Agent TZNAME Parsing Remote Code Execution (Zero Day Initiative)
- ZDI-10-247 Novell Groupwise GWPOA HTTP Request Remote Code Execution Vulnerabili (Zero Day Initiative)