Security Vulnerability - GroupWise 8 Internet Agent VCALENDAR Variable Parsing
This document (7007155) is provided subject to the disclaimer at the end of this document.
Novell GroupWise 8 Internet Agent
Previous versions of GroupWise are likely also vulnerable but are no longer supported. Customers on earlier versions of GroupWise should, at a minimum, upgrade their GWIAs and associated Domains to version 8.02 Hot Patch 1 in order to secure their system.
These vulnerabilities were discovered and reported by Anonymous working with TippingPoint's Zero Day Initiative (http://www.zerodayinitiative.com), ZDI-CAN-954, ZDI-CAN-955, ZDI-CAN-960, ZDI-CAN-961
Novell bugs 642339, 642345, 642349, 642340
This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
- Document ID:7007155
- Creation Date:04-NOV-10
- Modified Date:26-APR-12
Did this document solve your problem? Provide Feedback