critical10.0Public exploit code
CVE-2008-2703
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Novell Groupwise Messenger 2.0 Client - Buffer Overflow2008-07-02 · dos · novell · Verified
- Novell Groupwise Messenger Client - Remote Buffer Overflow (Metasploit)2010-06-22 · remote · windows · Verified
Impact
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Groupwise Messenger | Versions 2.0, 2.0.2, 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30576
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html
- http://www.securityfocus.com/archive/1/493964/100/0/threaded
- http://www.securityfocus.com/bid/29602
- http://www.securitytracker.com/id?1020209
- http://www.vupen.com/english/advisories/2008/1764/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42917
- http://secunia.com/advisories/30576
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html
- http://www.securityfocus.com/archive/1/493964/100/0/threaded
- http://www.securityfocus.com/bid/29602
- http://www.securitytracker.com/id?1020209
- http://www.vupen.com/english/advisories/2008/1764/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42917