PT-2013-1498 · Novell · Novell Groupwise

Andrea Micalizzi + 1 · Published 2013-02-01 · Updated 2013-02-25 · CVE-2012-0439

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 through 8.0.3 HP2 Novell GroupWise 2012 versions prior to SP1 HP1

Description The issue allows remote attackers to execute arbitrary code. This can be achieved via a pointer argument to the SetEngine method or an XPItem pointer argument to an unspecified method in the ActiveX control in gwcls1.dll.

Recommendations For Novell GroupWise versions 8.0 through 8.0.3 HP2, update to version 8.0.3 HP2 or later. For Novell GroupWise 2012 versions prior to SP1 HP1, update to SP1 HP1 or later. As a temporary workaround, consider disabling the ActiveX control in gwcls1.dll until a patch is available.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2012-0439

ZDI-13-008

Affected Products

Novell Groupwise

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novell_groupwise_gwcls1_actvx.rb · Exploit
• 🔥 https://exploit-db.com/exploits/24490 · Exploit
• http://novell.com/support/kb/doc.php?id=7011688 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-13-008 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-0439 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-13-008 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0439 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=743674 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=712144 · Note