Stack-based Buffer Overflow in Novell GroupWise Messenger
CVE-2006-0992

Currently unrated

Key Information:

Vendor

Novell
Status
Groupwise Messenger
Vendor
CVE Published:
14 April 2006

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 88%

What is CVE-2006-0992?

A vulnerability exists in Novell GroupWise Messenger that allows remote attackers to exploit a stack-based buffer overflow. This occurs when an unusually long Accept-Language header value, which lacks a comma or semicolon, is processed. An attacker can leverage this flaw to execute arbitrary code on the affected system, potentially compromising its security. Proper input validation and code handling measures are crucial to mitigate this risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2006-0992 - Proof of Concept

References

http://metasploit.blogspot.com/2006/04/exploit-developmen...
x_refsource_MISC
http://www.zerodayinitiative.com/advisories/ZDI-06-008.html
x_refsource_MISC
http://www.osvdb.org/24617
vdb-entryx_refsource_OSVDB

EPSS Score

88% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.