The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Novell GroupWise Messenger nmma.exe DoS
------------------------------------------------------------------------
SUMMARY
<http://www.novell.com/documentation/nm2/> Novell Messenger is "a
corporate, cross-platform instant messaging product that is based on
Novell eDirectory". Remote exploitation of a DoS vulnerability in Novell
Inc.'s GroupWise Messenger could allow attackers to crash the Messenger
server.
DETAILS
Vulnerable Systems:
* Novell GroupWise Messenger version 2
The vulnerability specifically exists due to improper handling of a an
HTTP POST request with a modified 'val' parameter. When such a request is
received, a NULL pointer dereference occurs, leading to a crash of the
service.
Analysis:
Successful exploitation of this vulnerability would result in the server
crashing, rendering it unusable until it is restarted. Further
exploitation does not appear possible. In order to exploit this
vulnerability, an attacker must send a specially constructed HTTP request
to the server on TCP port 8300.
Vendor response:
Novell has released updates in the form of Hot Patches. More information
on the security update can be found via the following link.
<http://support.novell.com/filefinder/security/index.html>
http://support.novell.com/filefinder/security/index.html
CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4511>
CVE-2006-4511
Disclosure Timeline:
08/17/2006 - Initial vendor notification
08/18/2006 - Initial vendor response
10/02/2006 - Coordinated public disclosure
ADDITIONAL INFORMATION
The information has been provided by
<mailto:idlabs-advisories@lists.idefense.com> iDefense Labs Security
Advisories.
The original article can be found at:
<http://www.idefense.com/intelligence/vulnerabilities/display.php?id=416>
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=416
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
