Description
Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
References
- ADV-2009-1393 vdb-entry
- https://bugzilla.novell.com/show_bug.cgi?id=482914
- http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_1393140.php
- 35177 third-party-advisory
- 35064 vdb-entry
- 54644 vdb-entry
- gia-email-code-execution(50693) vdb-entry
- 1022276 vdb-entry
- https://bugzilla.novell.com/show_bug.cgi?id=478892
- http://www.vupen.com/exploits/Novell_GroupWise_GWIA_Email_Address_Remote_Buffer_Overflow_Exploit_1393141.php
- 35065 vdb-entry
- 20090522 Novell GroupWise Internet Agent Remote Buffer Overflow Vulnerabilities mailing-list
- gia-smtp-code-execution(50692) vdb-entry
- 54645 vdb-entry
- http://www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1
- http://www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1