Novell GroupWise Internet Agent TZID variable Parsing Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
Novell GroupWise 8.x
Novell GroupWise 7.x
Unaffected system:
Novell GroupWise 8.02 HP2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 46025
Cve id: CVE-2010-4325

Novell GroupWise is a cross-platform collaboration software.

Novell GroupWise Internet Agent has security vulnerabilities. Remote attackers can exploit these vulnerabilities to execute arbitrary code with system-level permissions to completely control the affected computers or cause DoS attacks.

When the TZID variable is parsed in the received VCALENDAR information, an error occurs in Internet Agent component.

<**>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Novell
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.novell.com/security-alerts