Signature Detail
Short Name |
APP:NOVELL:GWIA-RRULE-BO |
|---|---|
Severity |
High |
Recommended |
No |
Category |
APP |
Keywords |
Novell GroupWise Internet Agent RRULE Weekday Parsing Buffer Overflow |
Release Date |
2013/01/07 |
Update Number |
2222 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Novell GroupWise Internet Agent RRULE Weekday Parsing Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Novell GroupWise Internet Agent (GWIA). A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the targeted application.
Extended Description
Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message.
Affected Products
- novell groupwise 8.0 (hp1)
- novell groupwise 8.0 (hp2)
References
- BugTraq: 44732
- CVE: CVE-2011-2662