APP: Novell GroupWise Internet Agent iCalendar Parsing Denial of Service

This signature detects attempts to exploit a known vulnerability against Novell GroupWise Internet Agent. A successful attack can result in a denial-of-service condition.

Extended Description

The iCalendar component in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted date-time string in a .ics attachment.

Affected Products

Novell groupwise

References

BugTraq: 55574

CVE: CVE-2011-3827

Short Name
APP:NOVELL:GROUPWISEIA-ICAL-DOS
Severity
Major
Recommended
False
Recommended Action
None
Category
APP
Keywords
Agent CVE-2011-3827 Denial GroupWise Internet Novell Parsing Service bid:55574 iCalendar of
Release Date
01/04/2013
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3336
False Positive
Unknown
Vendors

Novell

CVSS Score

4.3

Found a potential security threat?