Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Groupwise | Novell | * | 8.0.2 (including) |
| Groupwise | Novell | 4.1 (including) | 4.1 (including) |
| Groupwise | Novell | 4.1a (including) | 4.1a (including) |
| Groupwise | Novell | 5.0 (including) | 5.0 (including) |
| Groupwise | Novell | 5.1 (including) | 5.1 (including) |
| Groupwise | Novell | 5.2 (including) | 5.2 (including) |
| Groupwise | Novell | 5.5 (including) | 5.5 (including) |
| Groupwise | Novell | 5.57e (including) | 5.57e (including) |
| Groupwise | Novell | 6.0 (including) | 6.0 (including) |
| Groupwise | Novell | 6.0-sp1 (including) | 6.0-sp1 (including) |
| Groupwise | Novell | 6.0-sp5 (including) | 6.0-sp5 (including) |
| Groupwise | Novell | 6.0.1-sp1 (including) | 6.0.1-sp1 (including) |
| Groupwise | Novell | 6.5 (including) | 6.5 (including) |
| Groupwise | Novell | 6.5-sp1 (including) | 6.5-sp1 (including) |
| Groupwise | Novell | 6.5-sp2 (including) | 6.5-sp2 (including) |
| Groupwise | Novell | 6.5-sp3 (including) | 6.5-sp3 (including) |
| Groupwise | Novell | 6.5-sp4 (including) | 6.5-sp4 (including) |
| Groupwise | Novell | 6.5-sp5 (including) | 6.5-sp5 (including) |
| Groupwise | Novell | 6.5-sp6 (including) | 6.5-sp6 (including) |
| Groupwise | Novell | 6.5.2 (including) | 6.5.2 (including) |
| Groupwise | Novell | 6.5.3 (including) | 6.5.3 (including) |
| Groupwise | Novell | 6.5.4 (including) | 6.5.4 (including) |
| Groupwise | Novell | 6.5.6 (including) | 6.5.6 (including) |
| Groupwise | Novell | 6.5.7 (including) | 6.5.7 (including) |
| Groupwise | Novell | 7.0 (including) | 7.0 (including) |
| Groupwise | Novell | 7.0.1 (including) | 7.0.1 (including) |
| Groupwise | Novell | 7.0.2 (including) | 7.0.2 (including) |
| Groupwise | Novell | 7.0.3 (including) | 7.0.3 (including) |
| Groupwise | Novell | 7.0.4 (including) | 7.0.4 (including) |
| Groupwise | Novell | 8.0 (including) | 8.0 (including) |
| Groupwise | Novell | 8.0.1 (including) | 8.0.1 (including) |
References
- http://www.facebook.com/note.php?note_id=477865030928
- http://www.novell.com/support/viewContent.do?externalId=7007154\u0026sliceId=1
- http://zerodayinitiative.com/advisories/ZDI-10-241/
- https://bugzilla.novell.com/show_bug.cgi?id=642338
- http://www.facebook.com/note.php?note_id=477865030928
- http://www.novell.com/support/viewContent.do?externalId=7007154\u0026sliceId=1
- http://zerodayinitiative.com/advisories/ZDI-10-241/
- https://bugzilla.novell.com/show_bug.cgi?id=642338