PT-2009-3065 · Novell · Novell Groupwise

Nick Debaggis

·

CVE-2009-0410

·

Publicado

2009-02-03

·

Atualizado

2018-10-11

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 6.5x through 8.0
Description The issue is caused by an off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA), allowing remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command. This leads to a buffer overflow.
Recommendations For Novell GroupWise versions 6.5x through 8.0, update to a version that includes a fix for the off-by-one error in the SMTP daemon.

Exploit

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-0410

Produtos afetados

Novell Groupwise