OSVDB ID: 35018

Title: Novell GroupWise WebAccess GWINTER.exe Basic Authentication Base64 Decoding Overflow

Info

Disclosure

Apr 18, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Apr 16, 2007

Description

A remote stack-based overflow exists in the WebAccess agent GWINTER.exe. With a specially crafted HTTP Basic authentication request sent to port 7205/TCP or 7211/TCP, an attacker can execute arbitrary commands with elevated privileges resulting in a loss of integrity.

Classification

Location: Local / Remote
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Private, Exploit Commercial
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Upgrade to version 7.02 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Novell, Inc.

GroupWise

7.0 SP1
7.0 GA

References

Credit

  • Tenable Network Security -


Direct URL: http://osvdb.org/35018