Description
Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.
References
- http://download.novell.com/Download?buildid=8RF83go0nZg~
- ADV-2007-1455 vdb-entry
- 1017932 vdb-entry
- 24944 third-party-advisory
- http://download.novell.com/Download?buildid=O9ucpbS1bK0~
- http://www.zerodayinitiative.com/advisories/ZDI-07-015.html
- 23556 vdb-entry
- 20070418 ZDI-07-015: Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability mailing-list
- 2610 third-party-advisory