SMTP: Novell GroupWise Internet Agent Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Novell GroupWise Internet Agent. A successful attack can lead to arbitrary code execution.

Extended Description

Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.

Affected Products

Novell groupwise

References

BugTraq: 44732

CVE: CVE-2011-2663

Short Name
SMTP:NOVELL-GROUPWISE-BO
Severity
Major
Recommended
False
Recommended Action
None
Category
SMTP
Keywords
Agent Buffer CVE-2011-2663 GroupWise Internet Novell Overflow bid:44732
Release Date
06/12/2015
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3567
False Positive
Unknown
Vendors

Novell

CVSS Score

10.0

Found a potential security threat?