CVE-2006-0992
- State
- Published
- Severity
- Not scored
- Published
- Apr 14, 2006
- Updated
- Aug 7, 2024
- Reserved
- Mar 3, 2006
Description
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the correct identifier.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://metasploit.blogspot.com/2006/04/exploit-development-groupwise_14.html
- http://www.zerodayinitiative.com/advisories/ZDI-06-008.html
- 24617vdb-entry
- ADV-2006-1355vdb-entry
- groupwise-accept-language-bo(25828)vdb-entry
- 19663third-party-advisory
- 20060413 ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflowmailing-list
- 1679exploit
- 1015911vdb-entry
- http://support.novell.com/cgi-bin/search/searchtid.cgi?10100861.htm
- http://cirt.dk/advisories/cirt-42-advisory.txt
- 17503vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.