PT-2006-2030 · Novell · Novell Groupwise Messenger

H D Moore · Published 2006-04-14 · Updated 2018-10-18 · CVE-2006-0992

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell GroupWise Messenger versions prior to 2.0 Public Beta 2

Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a long Accept-Language value without a comma or semicolon.

Recommendations For versions prior to 2.0 Public Beta 2, update to 2.0 Public Beta 2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Accept-Language header to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-0992

Affected Products

Novell Groupwise Messenger

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/novell_messenger_acceptlang.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16757 · Exploit
• 🔥 https://exploit-db.com/exploits/1679 · Exploit
• http://securityfocus.com/bid/17503 · Patch
• http://support.novell.com/cgi-bin/search/searchtid.cgi?10100861.htm · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0992 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-06-008.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25828 · Note
• http://secunia.com/advisories/19663 · Note
• http://vupen.com/english/advisories/2006/1355 · Note
• http://cirt.dk/advisories/cirt-42-advisory.txt · Note
• http://securitytracker.com/id?1015911 · Note
• http://osvdb.org/24617 · Note
• http://metasploit.blogspot.com/2006/04/exploit-development-groupwise_14.html · Note
• http://securityfocus.com/archive/1/430911/100/0/threaded · Note