jetlib.sec » Tags » groupwise

Feeds

133433 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

72 items tagged "groupwise"

Related tags: vulnerability research [+], stack overflow [+], memory corruption [+], idefense security advisory [+], code [+], buffer overflow vulnerability [+], remote buffer overflow [+], based buffer overflow [+], proof of concept [+], overflow vulnerability [+], novell [+], tzname [+], groupwise address book [+], novell groupwise [+], txt [+], novell groupwise webaccess [+], memory [+], interface port [+], heap [+], e mail [+], corruption [+], address [+], webaccess [+], stack buffer [+], novell netware [+], bugtraq [+], novell groupwise internet agent [+], code execution [+], zdi [+], vulnerabilities [+], prl [+], poc [+], overflow error [+], netware [+], multiple [+], internet gateway [+], groupwise client [+], client [+], buffer [+], agent request [+], vulnerability [+], internet [+], safer use [+], messenger [+], groupwise calendar [+]

• March 01, 2012
• 14:00

  [dos / poc] - Novell Groupwise Address Book Remote Code Execution

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Novell Groupwise Address Book Remote Code Execution

  Tags:  novell poc groupwise groupwise-address-book novell-groupwise code-execution  

• February 29, 2012
• 19:16

  Novell Groupwise Address Book Code Execution

   » ‎ Packet Storm Security Exploits
  Novell Groupwise Address Book suffers from a remote code execution vulnerability.

  Tags:  novell address groupwise groupwise-address-book novell-groupwise code-execution  

• 19:16

  Novell Groupwise Address Book Code Execution

   » ‎ Packet Storm Security Recent Files
  Novell Groupwise Address Book suffers from a remote code execution vulnerability.

  Tags:  novell address groupwise groupwise-address-book novell-groupwise code-execution  

• 19:16

  Novell Groupwise Address Book Code Execution

   » ‎ Packet Storm Security Misc. Files
  Novell Groupwise Address Book suffers from a remote code execution vulnerability.

  Tags:  novell address groupwise groupwise-address-book novell-groupwise code-execution  

• February 17, 2012
• 0:00

  Vuln: Novell GroupWise Messenger Client '.nmx' File Stack-Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise Messenger Client '.nmx' File Stack-Based Buffer Overflow Vulnerability

  Tags:  messenger novell groupwise buffer-overflow-vulnerability novell-groupwise based-buffer-overflow  

• February 16, 2012
• 19:41

  Novell GroupWise Messenger 2.1.0 Arbitrary Memory Write

   » ‎ Packet Storm Security Exploits
  Novell GroupWise Messenger versions 2.1.0 and below suffer from an arbitrary memory write vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise proof-of-concept  

• 19:41

  Novell GroupWise Messenger 2.1.0 Arbitrary Memory Write

   » ‎ Packet Storm Security Recent Files
  Novell GroupWise Messenger versions 2.1.0 and below suffer from an arbitrary memory write vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise proof-of-concept  

• 19:41

  Novell GroupWise Messenger 2.1.0 Arbitrary Memory Write

   » ‎ Packet Storm Security Misc. Files
  Novell GroupWise Messenger versions 2.1.0 and below suffer from an arbitrary memory write vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise proof-of-concept  

• 19:39

  Novell GroupWise Messenger 2.1.0 Memory Corruption

   » ‎ Packet Storm Security Exploits
  Novell GroupWise Messenger versions 2.1.0 and below suffer from a memory corruption vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise memory-corruption proof-of-concept  

• 19:39

  Novell GroupWise Messenger 2.1.0 Memory Corruption

   » ‎ Packet Storm Security Recent Files
  Novell GroupWise Messenger versions 2.1.0 and below suffer from a memory corruption vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise memory-corruption proof-of-concept  

• 19:39

  Novell GroupWise Messenger 2.1.0 Memory Corruption

   » ‎ Packet Storm Security Misc. Files
  Novell GroupWise Messenger versions 2.1.0 and below suffer from a memory corruption vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise memory-corruption proof-of-concept  

• 19:37

  Novell GroupWise Messenger Client 2.1.0 Unicode Stack Overflow

   » ‎ Packet Storm Security Exploits
  Novell GroupWise Messenger Client versions 2.1.0 and below suffer from a unicode stack overflow vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise stack-overflow overflow-vulnerability  

• 19:37

  Novell GroupWise Messenger Client 2.1.0 Unicode Stack Overflow

   » ‎ Packet Storm Security Recent Files
  Novell GroupWise Messenger Client versions 2.1.0 and below suffer from a unicode stack overflow vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise stack-overflow overflow-vulnerability  

• 19:37

  Novell GroupWise Messenger Client 2.1.0 Unicode Stack Overflow

   » ‎ Packet Storm Security Misc. Files
  Novell GroupWise Messenger Client versions 2.1.0 and below suffer from a unicode stack overflow vulnerability. Proof of concept code included.

  Tags:  messenger novell groupwise novell-groupwise stack-overflow overflow-vulnerability  

• January 05, 2012
• 16:49

  Novell Groupwise Client DOCX Loader Relationship Id Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise Client.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell client groupwise novell-groupwise groupwise-client code-execution  

• 16:49

  Novell Groupwise iCal COMMENT, RRULE, TZNAME Code Execution Vulnerabilities

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise code-execution safer-use  

• September 28, 2011
• 15:41

  iDefense Security Advisory 09.26.11 - Novell Groupwise Memory Corruption

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 09.26.11 - Remote exploitation of a memory corruption vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs weekly. Specifically, by using a negative integer for the BYWEEKNO property, it is possible to trigger a write operation beyond the bounds of an allocated heap buffer. This can lead to the corruption of memory, and the execution of arbitrary code.

  Tags:  corruption memory groupwise idefense-security-advisory novell-groupwise memory-corruption  

• 15:41

  iDefense Security Advisory 09.26.11 - Novell Groupwise Memory Corruption

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a memory corruption vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs weekly. Specifically, by using a negative integer for the BYWEEKNO property, it is possible to trigger a write operation beyond the bounds of an allocated heap buffer. This can lead to the corruption of memory, and the execution of arbitrary code.

  Tags:  corruption memory groupwise idefense-security-advisory novell-groupwise memory-corruption  

• 15:41

  iDefense Security Advisory 09.26.11 - Novell Groupwise Memory Corruption

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a memory corruption vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs weekly. Specifically, by using a negative integer for the BYWEEKNO property, it is possible to trigger a write operation beyond the bounds of an allocated heap buffer. This can lead to the corruption of memory, and the execution of arbitrary code.

  Tags:  corruption memory groupwise idefense-security-advisory novell-groupwise memory-corruption  

• 15:38

  iDefense Security Advisory 09.26.11 - Novell Groupwise Memory Corruption

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 09.26.11 - Remote exploitation of a memory corruption vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs yearly. When adding a sequence of dates, it is possible to trigger an invalid array indexing vulnerability, and write beyond the bounds of a heap buffer. This can lead to the execution of arbitrary code. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell vulnerability groupwise novell-groupwise idefense-security-advisory memory-corruption  

• 15:38

  iDefense Security Advisory 09.26.11 - Novell Groupwise Memory Corruption

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a memory corruption vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs yearly. When adding a sequence of dates, it is possible to trigger an invalid array indexing vulnerability, and write beyond the bounds of a heap buffer. This can lead to the execution of arbitrary code. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell vulnerability groupwise novell-groupwise idefense-security-advisory memory-corruption  

• 15:38

  iDefense Security Advisory 09.26.11 - Novell Groupwise Memory Corruption

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a memory corruption vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs yearly. When adding a sequence of dates, it is possible to trigger an invalid array indexing vulnerability, and write beyond the bounds of a heap buffer. This can lead to the execution of arbitrary code. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell vulnerability groupwise novell-groupwise idefense-security-advisory memory-corruption  

• 15:34

  iDefense Security Advisory 09.26.11 - Novell Groupwise Heap Overflow

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs on weekdays. A heap based buffer overflow can be triggered due to the lack of checks to ensure that there is enough space in the buffer to hold all of the RRULE entry data. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap groupwise novell-groupwise idefense-security-advisory overflow-vulnerability  

• 15:34

  iDefense Security Advisory 09.26.11 - Novell Groupwise Heap Overflow

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs on weekdays. A heap based buffer overflow can be triggered due to the lack of checks to ensure that there is enough space in the buffer to hold all of the RRULE entry data. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap groupwise novell-groupwise idefense-security-advisory overflow-vulnerability  

• 15:34

  iDefense Security Advisory 09.26.11 - Novell Groupwise Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  iDefense Security Advisory 09.26.11 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s GroupWise could allow an attacker to execute arbitrary code with the privileges of the affected service. This vulnerability is present in the calendar processing code, which resides within the GroupWise Internet Agent (GWIA) process. The vulnerability occurs when parsing a malformed calendar recurrence (RRULE) that recurs on weekdays. A heap based buffer overflow can be triggered due to the lack of checks to ensure that there is enough space in the buffer to hold all of the RRULE entry data. Novell GroupWise 8.0x up to (and including) 8.02HP2 are vulnerable.

  Tags:  novell heap groupwise novell-groupwise idefense-security-advisory overflow-vulnerability  

• 14:34

  Novell GroupWise Calendar BYWEEKNO Memory Corruption

   » ‎ Packet Storm Security Advisories
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "ICalProcessYearlyRule()" function within the "gwwww1.dll" component when processing a malformed "BYWEEKNO" property in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar vulnerability-research  

• 14:34

  Novell GroupWise Calendar BYWEEKNO Memory Corruption

   » ‎ Packet Storm Security Recent Files
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "ICalProcessYearlyRule()" function within the "gwwww1.dll" component when processing a malformed "BYWEEKNO" property in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar vulnerability-research  

• 14:34

  Novell GroupWise Calendar BYWEEKNO Memory Corruption

   » ‎ Packet Storm Security Misc. Files
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "ICalProcessYearlyRule()" function within the "gwwww1.dll" component when processing a malformed "BYWEEKNO" property in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar vulnerability-research  

• 14:32

  Novell GroupWise Calendar integerList Buffer Overflow

   » ‎ Packet Storm Security Advisories
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "NgwIRecurParam::integerList()" function within the "gwwww1.dll" component when processing a malformed "RRULE" integer list in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar vulnerability-research  

• 14:32

  Novell GroupWise Calendar integerList Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "NgwIRecurParam::integerList()" function within the "gwwww1.dll" component when processing a malformed "RRULE" integer list in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar vulnerability-research  

• 14:32

  Novell GroupWise Calendar integerList Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "NgwIRecurParam::integerList()" function within the "gwwww1.dll" component when processing a malformed "RRULE" integer list in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar vulnerability-research  

• 14:08

  Novell GroupWise Calendar RRULE Remote Buffer Overflow

   » ‎ Packet Storm Security Advisories
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "NgwIRecurByWeekdayParam::bywdaylist()" function within the "gwwww1.dll" component when processing a malformed "RRULE" property in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar remote-buffer-overflow  

• 14:08

  Novell GroupWise Calendar RRULE Remote Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "NgwIRecurByWeekdayParam::bywdaylist()" function within the "gwwww1.dll" component when processing a malformed "RRULE" property in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar remote-buffer-overflow  

• 14:05

  Novell GroupWise Calendar TZNAME Remote Buffer Overflow

   » ‎ Packet Storm Security Advisories
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "NgwiCalVTimeZoneBody::ParseSelf()" function within the "GWWWW1.dll" component when processing an overly long "TZNAME" variable in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar remote-buffer-overflow  

• 14:05

  Novell GroupWise Calendar TZNAME Remote Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "NgwiCalVTimeZoneBody::ParseSelf()" function within the "GWWWW1.dll" component when processing an overly long "TZNAME" variable in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.

  Tags:  novell vulnerability groupwise novell-groupwise groupwise-calendar remote-buffer-overflow  

• 0:00

  Vuln: Novell GroupWise 'TZNAME' Variable Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise 'TZNAME' Variable Parsing Remote Code Execution Vulnerability

  Tags:  novell tzname groupwise code-execution novell-groupwise vulnerability  

• September 27, 2011
• 6:55

  Novell GroupWise Internet Agent HTTP Interface Buffer Overflow

   » ‎ Packet Storm Security Advisories
  Secunia Research has discovered a vulnerability in Novell GroupWise, which can be exploited by malicious users to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. The vulnerability is caused by a boundary error in GroupWise Internet Agent (gwia.exe) within the HTTP interface (port 9850/tcp) when handling requests for certain .css resources. This can be exploited to cause a limited stack-based buffer overflow via a specially crafted, overly long request.

  Tags:  novell internet groupwise novell-groupwise-internet-agent based-buffer-overflow interface-port  

• 6:55

  Novell GroupWise Internet Agent HTTP Interface Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  Secunia Research has discovered a vulnerability in Novell GroupWise, which can be exploited by malicious users to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. The vulnerability is caused by a boundary error in GroupWise Internet Agent (gwia.exe) within the HTTP interface (port 9850/tcp) when handling requests for certain .css resources. This can be exploited to cause a limited stack-based buffer overflow via a specially crafted, overly long request.

  Tags:  novell internet groupwise novell-groupwise-internet-agent based-buffer-overflow interface-port  

• 6:55

  Novell GroupWise Internet Agent HTTP Interface Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  Secunia Research has discovered a vulnerability in Novell GroupWise, which can be exploited by malicious users to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. The vulnerability is caused by a boundary error in GroupWise Internet Agent (gwia.exe) within the HTTP interface (port 9850/tcp) when handling requests for certain .css resources. This can be exploited to cause a limited stack-based buffer overflow via a specially crafted, overly long request.

  Tags:  novell internet groupwise novell-groupwise-internet-agent based-buffer-overflow interface-port  

• 6:54

  Novell GroupWise Internet Agent TZNAME Parsing

   » ‎ Packet Storm Security Advisories
  Secunia Research has discovered a vulnerability in Novell GroupWise, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by an integer truncation error in NgwiCalVTimeZoneBody::ParseSelf() within gwwww1.dll when GroupWise Internet Agent parses "TZNAME" variables in VCALENDAR data. This can be exploited to cause a heap-based buffer overflow via a specially crafted e-mail containing an overly long "TZNAME" property value. Successful exploitation may allow execution of arbitrary code.

  Tags:  novell tzname groupwise novell-groupwise-internet-agent based-buffer-overflow e-mail  

• 6:54

  Novell GroupWise Internet Agent TZNAME Parsing

   » ‎ Packet Storm Security Recent Files
  Secunia Research has discovered a vulnerability in Novell GroupWise, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by an integer truncation error in NgwiCalVTimeZoneBody::ParseSelf() within gwwww1.dll when GroupWise Internet Agent parses "TZNAME" variables in VCALENDAR data. This can be exploited to cause a heap-based buffer overflow via a specially crafted e-mail containing an overly long "TZNAME" property value. Successful exploitation may allow execution of arbitrary code.

  Tags:  novell tzname groupwise novell-groupwise-internet-agent based-buffer-overflow e-mail  

• 6:54

  Novell GroupWise Internet Agent TZNAME Parsing

   » ‎ Packet Storm Security Misc. Files
  Secunia Research has discovered a vulnerability in Novell GroupWise, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by an integer truncation error in NgwiCalVTimeZoneBody::ParseSelf() within gwwww1.dll when GroupWise Internet Agent parses "TZNAME" variables in VCALENDAR data. This can be exploited to cause a heap-based buffer overflow via a specially crafted e-mail containing an overly long "TZNAME" property value. Successful exploitation may allow execution of arbitrary code.

  Tags:  novell tzname groupwise novell-groupwise-internet-agent based-buffer-overflow e-mail  

• 0:00

  Vuln: Novell GroupWise 'TZNAME' Variable Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise 'TZNAME' Variable Parsing Remote Code Execution Vulnerability

  Tags:  novell tzname groupwise code-execution novell-groupwise vulnerability  

• 0:00

  Vuln: Novell GroupWise Internet Agent HTTP Interface Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise Internet Agent HTTP Interface Stack Buffer Overflow Vulnerability

  Tags:  novell internet groupwise novell-groupwise-internet-agent buffer-overflow-vulnerability stack-buffer  

• September 26, 2011
• 0:00

  Vuln: Novell GroupWise Internet Agent 'TZID' Variable Parsing Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise Internet Agent 'TZID' Variable Parsing Buffer Overflow Vulnerability

  Tags:  novell internet groupwise novell-groupwise-internet-agent buffer-overflow-vulnerability  

• March 30, 2011
• 20:11

  Novell GroupWise Internet Agent TZID Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise-internet-agent code-execution safer-use  

• March 25, 2011
• 20:10

  Novell GroupWise Internet Agent REQUEST-STATUS Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise-internet-agent code-execution safer-use  

• March 13, 2011
• 23:45

  Novell GroupWise TZID Variable Buffer Overflow Vulnerability

   » ‎ SecuriTeam
  Novell GroupWise Contains a Vulnerability caused by a buffer overflow error in the "gwwww1.dll".

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell buffer groupwise buffer-overflow-vulnerability novell-groupwise overflow-error  

• January 31, 2011
• 0:00

  Vuln: Novell GroupWise Internet Agent REQUEST-STATUS Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise Internet Agent REQUEST-STATUS Buffer Overflow Vulnerability

  Tags:  novell internet groupwise novell-groupwise-internet-agent buffer-overflow-vulnerability agent-request  

• January 27, 2011
• 19:32

  Novell GroupWise VCALENDAR TZID Variable Remote Buffer Overflow

   » ‎ Packet Storm Security Advisories
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "gwwww1.dll" module when processing the "TZID" variable within VCALENDAR data, which could be exploited by remote unauthenticated attackers to execute arbitrary code with SYSTEM privileges. Novell GroupWise versions 8.02 HP 1 (Hot Patch 1) and prior are affected.

  Tags:  novell vulnerability groupwise remote-buffer-overflow novell-groupwise vulnerability-research  

• 19:32

  Novell GroupWise VCALENDAR TZID Variable Remote Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "gwwww1.dll" module when processing the "TZID" variable within VCALENDAR data, which could be exploited by remote unauthenticated attackers to execute arbitrary code with SYSTEM privileges. Novell GroupWise versions 8.02 HP 1 (Hot Patch 1) and prior are affected.

  Tags:  novell vulnerability groupwise remote-buffer-overflow novell-groupwise vulnerability-research  

• 19:32

  Novell GroupWise VCALENDAR TZID Variable Remote Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "gwwww1.dll" module when processing the "TZID" variable within VCALENDAR data, which could be exploited by remote unauthenticated attackers to execute arbitrary code with SYSTEM privileges. Novell GroupWise versions 8.02 HP 1 (Hot Patch 1) and prior are affected.

  Tags:  novell vulnerability groupwise remote-buffer-overflow novell-groupwise vulnerability-research  

• 0:00

  Vuln: Novell GroupWise Internet Agent 'TZID' Variable Parsing Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise Internet Agent 'TZID' Variable Parsing Buffer Overflow Vulnerability

  Tags:  novell internet groupwise novell-groupwise-internet-agent buffer-overflow-vulnerability  

• January 26, 2011
• 0:00

  Vuln: Novell GroupWise Internet Agent 'TZID' Variable Parsing Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise Internet Agent 'TZID' Variable Parsing Buffer Overflow Vulnerability

  Tags:  novell internet groupwise novell-groupwise-internet-agent buffer-overflow-vulnerability  

• January 04, 2011
• 20:49

  Novell GroupWise Internet Agent TZNAME Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise-internet-agent code-execution safer-use  

• 20:49

  Novell Groupwise Internet Agent IMAP LIST Command Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise Internet Agent.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell internet groupwise novell-groupwise-internet-agent code-execution safer-use  

• 20:49

  Novell GroupWise Internet Agent Content-Type Parsing Integer Signedness Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise-internet-agent code-execution safer-use  

• 20:44

  Novell GroupWise Internet Agent COMMENT Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise-internet-agent code-execution safer-use  

• 20:34

  Novell GroupWise Internet Agent RRULE Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise-internet-agent code-execution safer-use  

• January 03, 2011
• 17:55

  Novell GroupWise Internet Agent Content-Type String Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise-internet-agent code-execution safer-use  

• 13:44

  Novell GroupWise Internet Agent Content-Type Multiple Value Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code groupwise novell-groupwise-internet-agent code-execution safer-use  

• November 09, 2010
• 0:00

  Vuln: Novell GroupWise Multiple Remote Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise Multiple Remote Vulnerabilities

  Tags:  novell multiple groupwise novell-groupwise vulnerabilities  

• September 09, 2010
• 11:26

  Novell Netware Groupwise Internet Gateway Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise Internet Agent.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell internet groupwise novell-groupwise-internet-agent novell-netware code-execution  

• July 21, 2010
• 9:01

  Bugtraq: ZDI-10-135: Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-135: Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities

  Tags:  novell webaccess groupwise novell-groupwise-webaccess bugtraq zdi  

• July 17, 2010
• 0:34

  novellgwia-overflow.txt

   » ‎ Packet Storm Security Recent Files
  The Novell Groupwise Internet Agent suffers from a remote code execution vulnerability due to a stack overflow.

  Tags:  novell txt groupwise novell-groupwise-internet-agent stack-overflow code-execution  

• 0:34

  novellgwia-overflow.txt

   » ‎ Packet Storm Security Exploits
  The Novell Groupwise Internet Agent suffers from a remote code execution vulnerability due to a stack overflow.

  Tags:  novell txt groupwise novell-groupwise-internet-agent stack-overflow code-execution  

• July 16, 2010
• 15:02

  Bugtraq: ZDI-10-129: Novell Netware Groupwise Internet Gateway Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-129: Novell Netware Groupwise Internet Gateway Remote Code Execution Vulnerability

  Tags:  novell netware groupwise novell-netware code-execution internet-gateway  

• 15:01

  Bugtraq: {PRL} Novell Groupwise Internet Agent Stack Overflow

   » ‎ SecurityFocus Vulnerabilities
  {PRL} Novell Groupwise Internet Agent Stack Overflow

  Tags:  novell prl groupwise novell-groupwise-internet-agent stack-overflow bugtraq  

• 1:00

  Novell Groupwise Internet Agent Stack Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Novell Groupwise Internet Agent Stack Overflow

  Tags:  novell internet groupwise novell-groupwise-internet-agent stack-overflow  

• 0:00

  Vuln: Novell GroupWise Internet Agent 'CREATE' Verb Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell GroupWise Internet Agent 'CREATE' Verb Stack Buffer Overflow Vulnerability

  Tags:  novell internet groupwise novell-groupwise-internet-agent buffer-overflow-vulnerability stack-buffer  

• July 15, 2010
• 22:02

  novellgw-overflow.txt

   » ‎ Packet Storm Security Exploits
  Novell Groupwise Webaccess suffers from a remote code execution vulnerability due to a stack overflow.

  Tags:  novell txt groupwise novell-groupwise-webaccess stack-overflow code-execution  

• 1:00

  Novell Groupwise Webaccess Stack Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Novell Groupwise Webaccess Stack Overflow

  Tags:  novell webaccess groupwise novell-groupwise-webaccess stack-overflow