Bugtraq mailing list archives

Last (hopefully) update on GroupWise

From: thegnome () NMRC ORG (Simple Nomad)
Date: Sat, 10 Oct 1998 21:08:53 -0500


Since several people asked, the GroupWise patch for the POP3 buffer
overflow is at this location:

ftp://ftp.novell.com/pub/updates/grpware/grpwise/gwia551.exe

There is also a buffer overflow condition using the user name in IMAP as
well. This patch supposedly fixes both but we haven't tested this yet. If
you are not on version 5.5 you cannot apply the patch, so you have to
upgrade first (this is why we haven't tested it).

    Simple Nomad    //  "When viewed as a metaphor for the human
 thegnome () nmrc org  //    condition, the humble GNU C compiler
    www.nmrc.org    //         becomes an endless enigma."

Current thread:

Last (hopefully) update on GroupWise Simple Nomad (Oct 10)
- <Possible follow-ups>
- Last (hopefully) update on GroupWise Adrian Voinea (Feb 06)
  - /tmp race in mc-4.5.0 Pavel Machek (Oct 12)
    - Re: /tmp race in mc-4.5.0 Bennett Todd (Oct 14)
    - Re: /tmp race in mc-4.5.0 Marc Heuse (Oct 14)
    - [NTSEC] DoS attack in MS - Proxy 2.0 Jason Garms (Oct 15)
    - IRIX xterm(1) exploitable buffer overflow SGI Security Coordinator (Oct 15)
    - IRIX Xaw library exploitable buffer overflow SGI Security Coordinator (Oct 15)
    - Microsoft Security Bulletin (MS98-015) Aleph One (Oct 16)
    - HP-UX 10.20 SharedX Receiver Service DoS Security Research Team (Oct 16)
    - Breaking Finger in AIX 4.2 aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa (Oct 20)

(Thread continues...)