Signature Detail
Short Name |
APP:NOVELL:MESSENGER-BOF |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Novell Messenger Client Filename Parameter Stack Buffer Overflow |
Release Date |
2013/05/06 |
Update Number |
2260 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Novell Messenger Client Filename Parameter Stack Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Novell Messenger. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.
Affected Products
- novell groupwise_messenger 1.0.6
- novell groupwise_messenger 2.0
- novell groupwise_messenger 2.0.2
- novell groupwise_messenger up to 2.0.4
- novell messenger 2.2.0
- novell messenger up to 2.1
- novell messenger up to 2.2.1
References
- CVE: CVE-2013-1085