Novell Groupwise Address Book Remote Code Execution
Publish Date: 21 de июля de 2015
Severity: : High
CVE Kennungen: : CVE-2011-4189
Advisory Date: 21 de июля de 2015
DESCRIPTION
The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1004944
Trend Micro Deep Security DPI Rule Name: 1004944 - Novell GroupWise Address Book Remote Code Execution Vulnerability
AFFECTED SOFTWARE AND VERSION:
- novell groupwise 8.0
- novell groupwise 8.0.1
- novell groupwise 8.0.2