Novell GroupWise Internet Agent: Remote Code Execution Vulnerability

Users of Novell GroupWise Internet Agent please be advised of a Remote Code Execution vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com

ZDI-10-241: [ZDI-10-241] Novell GroupWise Internet Agent Content-Type Parsing Integer Signedness Remote Code Exe

-- Affected Products: Novell Groupwise

-- Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwia.exe module responsible for parsing e-mail messages received by the server. When the code encounters a Content-Type header it proceeds to parse out the numbers within its contents. The process does not properly check for signed integers and if it encounters one, it loops excessively while writing to the stack. This can be abused by a remote attacker to execute arbitrary code under the context of the SYSTEM user.Read more at www.criticalwatch.com

 

See this Amp at http://amplify.com/u/eyog