Description
Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.
References (3)
Core 3
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-13-036/
Vendor Advisory x_refsource_confirm
http://www.novell.com/support/kb/doc.php?id=7011935
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=777352
Scores
EPSS
0.2058
EPSS Percentile
95.7%
Details
CWE
CWE-119
Status
published
Products (6)
novell/groupwise_messenger
1.0.6
novell/groupwise_messenger
2.0
novell/groupwise_messenger
2.0.2
novell/groupwise_messenger
< 2.0.4
novell/messenger
2.2.0
novell/messenger
< 2.1
Published
Mar 29, 2013
Tracked Since
Feb 18, 2026