← back
CVE-2008-2703

CVE-2008-2703

EPSS 61.1%
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/31889unverifiedexploitdbwww.exploit-db.com/exploits/16814unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/30576https://exchange.xforce.ibmcloud.com/vulnerabilities/42917http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.htmlhttp://www.securityfocus.com/archive/1/493964/100/0/threadedhttp://www.securityfocus.com/bid/29602http://www.securitytracker.com/id?1020209http://www.vupen.com/english/advisories/2008/1764/references