Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long (1) REQUEST-STATUS, (2) TZNAME, (3) COMMENT, or (4) RRULE variable in this message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Novell GroupWise Internet Agent REQUEST-STATUS变量缓冲区溢出漏洞
Vulnerability Description
Novell GroupWise是美国Novell公司的一套协作通讯系统。该系统提供了电子邮件、日程安排、即时通讯、任务管理、文档管理以及联系人管理等协作通讯服务。 Novell GroupWise Internet Agent在实现上存在安全漏洞，当代码遇到REQUEST-STATUS变量时，将向变量分配0xFFFF的值，然后将该值复制到固定大小的缓冲区里而不加以验证。通过指定电子邮件中的较大字符串，造成缓冲区溢出。远程攻击者可利用此漏洞以系统级别权限执行任意代码并完全控制受影响的计算机，造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A