CIA RESEARCH

Alerts

[CIA-1051-Alert] Groupwise Accept-Language Header Buffer Overflow

Summary:

A vulnerability in Novell Groupwise Messenger allows an attacker to execute arbitrary code by injecting a malformed header value.

Technical Details:

Novell Groupwise Mesenger 2 is vulnerable to a remote buffer overflow in the processing of HTTP Header values. An overly long Accept-Language header will result in the execution of code with the privileges of the Groupswise Messenger Process. The specific flaw resides in a Messenger agent that typically listens on port 8300, which can be exploited by sending the web server a specially formatted Accept-Language Header.

Solution:

The vendor has issued a fixed a fix for this vulnerability (2.0 Public Beta 2), and will include the security patch within Groupwise Messenger 2.0 SP1. Additional information is available at the URL below:

Novell Support

CVE Reference:

CVE-2006-0092

SecurityTracker Number(s):

1015911

Vendor URL:

www.novell.com

About the Cenzic CIA Team:

Cenzic Intelligent Analysis (CIA) is Cenzic's research arm that focuses on continuous research for application vulnerabilities. Industry Research, Vulnerability assessment, penetration testing, and security testing - that's what Cenzic Intelligent Analysis Research is all about. Cenzic has dedicated experts whose sole job is to perform ongoing research to find not only common vulnerabilities but also vulnerabilities found in customer applications and make them available to our customers and to the community at large.

About Cenzic:

Cenzic provides Hailstorm® the revolutionary enterprise software suite for automated application security assessment and compliance that allows corporations and government organizations to dramatically improve the security of commercial and custom applications. Hailstorm enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities, and verify compliance with security policies. Benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic's customers are currently in the financial services and e-marketplaces sectors. For more information visit www.cenzic.com or call 1-866-4-CENZIC