Description
Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries.
References
- 29602 vdb-entry
- 30576 third-party-advisory
- 1020209 vdb-entry
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html
- 20080704 Novell GroupWise Messenger Client (GWIM) Remote Stack Overflow mailing-list
- ADV-2008-1764 vdb-entry
- groupwise-messenger-client-dos(42918) vdb-entry