Stack-based Buffer Overflow in Novell GroupWise Messenger
CVE-2006-0992

Currently unrated

Key Information:

Vendor

Novell
Status
Groupwise Messenger
Vendor
CVE Published:
14 April 2006

What is CVE-2006-0992?

A vulnerability exists in Novell GroupWise Messenger that allows remote attackers to exploit a stack-based buffer overflow. This occurs when an unusually long Accept-Language header value, which lacks a comma or semicolon, is processed. An attacker can leverage this flaw to execute arbitrary code on the affected system, potentially compromising its security. Proper input validation and code handling measures are crucial to mitigate this risk.

References

http://metasploit.blogspot.com/2006/04/exploit-developmen...
x_refsource_MISC
http://www.zerodayinitiative.com/advisories/ZDI-06-008.html
x_refsource_MISC
http://www.osvdb.org/24617
vdb-entryx_refsource_OSVDB

EPSS Score

88% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.