SECUNIA ADVISORY ID: SA40622 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/40622/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=40622 RELEASE DATE: 2010-07-15 DISCUSS ADVISORY: http://secunia.com/advisories/40622/#comments DESCRIPTION: Multiple vulnerabilities have been reported in Novell GroupWise, which can be exploited by malicious users to potentially compromise a vulnerable system and by malicious people to conduct cross-site scripting attacks and manipulate certain data 1) Certain input passed to the Message Transfer Agent, Post Office Agent, Internet Agent, WebAccess Agent, and Monitor Agent is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. 2) An input sanitation error in the HTTP interface for the Message Transfer Agent, Post Office Agent, Internet Agent, WebAccess Agent, and Monitor Agent can be exploited to insert arbitrary HTTP headers via specially crafted web requests. 3) An unspecified error in the Internet Agent can be exploited to cause a stack-based buffer overflow. Successful exploitation may allow execution of arbitrary code. 4) Certain input is not properly sanitised in the WebAccess component before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. 5) An input sanitation error in the WebAccess component can be exploited to insert arbitrary HTTP headers via specially crafted web requests. 6) An error in the user Proxy feature of the WebAccess component can be exploited to cause a stack-based buffer overflow via an overly long string. Successful exploitation may allow execution of arbitrary code. The vulnerabilities are reported in versions 7.0, 7.01, 7.02, 7.03x, 7.04, 8.0, and 8.01x. SOLUTION: Apply patches. Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ PROVIDED AND/OR DISCOVERED BY: 1,2) The vendor credits Kevin Lynn, The George Washington University. 3) The vendor credits {PRL} Francis Provencher working with the TippingPoint Zero Day Initiative. 4) The vendor credits scriptjunkie working with the TippingPoint Zero Day Initiative. 5) The vendor credits Ty Bailey, Rapid7. 6) Francis Provencher, Protek Research Labs. ORIGINAL ADVISORY: Novell: http://www.novell.com/support/viewContent.do?externalId=7006371 http://www.novell.com/support/viewContent.do?externalId=7006372 http://www.novell.com/support/viewContent.do?externalId=7006374 http://www.novell.com/support/viewContent.do?externalId=7006375 http://www.novell.com/support/viewContent.do?externalId=7006377 http://www.novell.com/support/viewContent.do?externalId=7006380 Francis Provencher: http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=14&Itemid=14 OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ----------------------------------------------------------------------

What's Related http://secunia.com/advi... https://ca.secunia.com/... http://secunia.com/advi... http://secunia.com/prod... http://www.novell.com/s... http://www.novell.com/s... http://www.novell.com/s... http://www.novell.com/s... http://www.novell.com/s... http://www.novell.com/s... http://www.protekresear... http://secunia.com/prod... http://secunia.com/prod... http://secunia.com/prod... http://secunia.com/prod... http://secunia.com/prod... http://secunia.com/advi... http://secunia.com/advi... More by kkbass More from Security

Story Options Mail Story to a Friend Printable Story Format

Trackback

Trackback URL for this entry: http://www.abend.org/trackback.php/20100715140437342

Novell Too Busy (With Proprietary Software) to Promote OpenSUSE | Techrights
Tracked on Friday, July 23 2010 @ 11:22 AM CDT

[SA40622] Novell GroupWise Multiple Vulnerabilities | 0 comments | Create New Account

Newest First Oldest First Flat Nested No Comments Threaded

The following comments are owned by whomever posted them. This site is not responsible for what they say.