Novell GroupWise Internet Agent HTTP Interface Stack Buffer Overflow Vulnerability

Bugtraq ID:	49779
Class:	Boundary Condition Error
CVE:	CVE-2011-0334
Remote:	Yes
Local:	No
Published:	Sep 26 2011 12:00AM
Updated:	Sep 27 2011 05:00PM
Credit:	Carsten Eiram with Secunia Research
Vulnerable:	Novell GroupWise Internet Agent 8.0 Novell Groupwise 8.02 HP2 Novell Groupwise 8.02 HP1 Novell Groupwise 8.02 Novell Groupwise 8.01x Novell Groupwise 8.0 SP2 Novell Groupwise 8.0 SP1 Novell Groupwise 8.0 HP3 Novell Groupwise 8.0 HP2 Novell Groupwise 8.0 HP1 Novell Groupwise 8.0
Not Vulnerable:	Novell Groupwise 8.02 HP3

Novell GroupWise Internet Agent HTTP Interface Stack Buffer Overflow Vulnerability

The Novell GroupWise Internet Agent is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successful exploits will allow attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Novell GroupWise Internet Agent HTTP Interface Stack Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell GroupWise Internet Agent HTTP Interface Stack Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for more information.

Novell GroupWise Internet Agent HTTP Interface Stack Buffer Overflow Vulnerability

References:

• Novell GroupWise Homepage (Novell)
  
• Security Vulnerability - GroupWise 8 Internet Agent HTTP Interface Stack Overflo (Novell)