Novell GroupWise Internet Agent Content-Type Multiple Value Parsing: Remote Code Execution Vulnerability

Users of Novell GroupWise Internet Agent Content-Type Multiple Value Parsing please be advised of a Remote Code Execution vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com

ZDI-10-237: [ZDI-10-237] Novell GroupWise Internet Agent Content-Type Multiple Value Parsing Remote Code Executi

-- Affected Products: Novell Groupwise

-- Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwia.exe module responsible for parsing e-mail messages received by the server. When the code encounters a Content-Type header it proceeds to parse out the entities within its contents, separated by a semicolon. The process does not properly check the size of these values before copying them individually to a fixed-length stack buffer. This can be abused by an attacker to overflow the buffer and subsequently execute arbitrary code under the context of the SYSTEM user.Read more at www.criticalwatch.com

 

See this Amp at http://amplify.com/u/f0jw