PT-2013-1498 · Novell · Novell Groupwise

Andrea Micalizzi + 1 · Publicado 2013-02-01 · Atualizado 2013-02-25 · CVE-2012-0439

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 through 8.0.3 HP2 Novell GroupWise 2012 versions prior to SP1 HP1

Description The issue allows remote attackers to execute arbitrary code. This can be achieved via a pointer argument to the SetEngine method or an XPItem pointer argument to an unspecified method in the ActiveX control in gwcls1.dll.

Recommendations For Novell GroupWise versions 8.0 through 8.0.3 HP2, update to version 8.0.3 HP2 or later. For Novell GroupWise 2012 versions prior to SP1 HP1, update to SP1 HP1 or later. As a temporary workaround, consider disabling the ActiveX control in gwcls1.dll until a patch is available.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-0439

ZDI-13-008

Produtos afetados

Novell Groupwise

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novell_groupwise_gwcls1_actvx.rb · Exploit
• 🔥 https://exploit-db.com/exploits/24490 · Exploit
• http://zerodayinitiative.com/advisories/ZDI-13-008 · Nota
• http://novell.com/support/kb/doc.php?id=7011688 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0439 · Nota
• https://zerodayinitiative.com/advisories/ZDI-13-008 · Nota de Segurança
• https://bugzilla.novell.com/show_bug.cgi?id=743674 · Nota
• https://bugzilla.novell.com/show_bug.cgi?id=712144 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0439 · Nota de Segurança