CVE-2013-1085

published 2013-03-29

CVE-2013-1085: Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2…

Priority P3 51 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
novell	groupwise_messenger	<= 2.0.4	—
novell	groupwise_messenger	—	—
novell	groupwise_messenger	—	—
novell	groupwise_messenger	—	—
novell	messenger	<= 2.1	—
novell	messenger	<= 2.2.1	—
novell	messenger	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119