CVE-2008-2703
Novell GroupWise Messenger < 2.0.3 HP1 - Remote Code Execution via Spoofed Server Response
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-2703.
PoCs published by Metasploit, Francisco Amato, including Metasploit module exploits/windows/novell/groupwisemessenger_client.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Novell GroupWise Messenger Client via a crafted HTTP response, allowing arbitrary code execution. It targets versions 1.0 and 2.0 with specific return addresses and includes payload handling for Windows platforms.
Description
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Novell GroupWise Messenger Client via a crafted HTTP response, allowing arbitrary code execution. It targets versions 1.0 and 2.0 with specific return addresses and includes payload handling for Windows platforms.
This Perl script emulates a fake Novell GroupWise Messenger server to exploit a buffer overflow vulnerability (CVE-2008-2703) by sending a maliciously crafted response containing a large string of 'A' characters (5000 bytes) to trigger the overflow.
This Metasploit module exploits a stack buffer overflow in Novell GroupWise Messenger Client by sending a crafted HTTP response. It achieves remote code execution via a payload delivered through a malformed response.