|
Novell Groupwise 6 SP3 fixes multiple issues
|
|
|
|
|
Secunia Advisory:
|
SA8602
|
|
|
Release Date:
|
2003-04-16
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Novell Groupwise 6.x
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
Novell has released Groupwise 6 Support Pack 3. This fixes a security issue in OpenSSL, which can be exploited to cause a DoS (Denial of Service) on the MTA. Multiple other issues has also been fixed, where some potentially could be security related.
The following issues could pose as security risks. This has not been confirmed, though.
Admin API Fixes:
- Fixed a memory leak.
Agent Fixes:
- A high-utilization problem with the POA has been fixed.
- Intruder detection is properly honored when LDAP authentication is in use.
- Several POA abends have been fixed.
- The MTA includes a newer version of OpenSSL that prevents a "denial of service" type of security attack.
- Several MTA abends have been fixed.
Client Fixes:
- POP3 authentication has been enhanced.
Internet Agent Fixes:
- The Internet Agent correctly processes messages with extremely long subject lines in compliance with RFC2822.
- In the context of a foreign post office with an alias, messages are no longer being relayed because of incorrect message format.
- The Internet Agent no longer shuts down if it encounters a bad message that generates an unknown error code.
- Fixed several Internet Agent memory leaks.
- Fixed several Internet Agent abends.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector.
Solution:
Apply Service Pack 3.
GroupWise 6 Support Pack 3 Multi-lan:
http://support.novell.com/servlet/filedownload/pub/gw6sp3m.exe
GroupWise 6 Support Pack3 Multi-56 bit:
http://support.novell.com/servlet/filedownload/pub/gw6sp3m_56.exe
GroupWise 6 Support Pack3 EEAL 128 bit:
http://support.novell.com/servlet/filedownload/pub/gw6sp3eeal.exe
Original Advisory:
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2965454.htm
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
11 Related Secunia Security Advisories, displaying 10
|
|
|
1. Novell GroupWise Windows Client API Security Bypass
|
|
2. Novell GroupWise Client HTML E-Mail Processing Buffer Overflow
|
|
3. Novell GroupWise Authentication Credentials Disclosure Security Issue
|
|
4. Novell GroupWise WebAccess Multiple Vulnerabilities
|
|
5. Novell GroupWise Windows Client Email Access Vulnerability
|
|
6. GroupWise Client Buffer Overflow Vulnerability
|
|
7. Novell GroupWise WebAccess Script Insertion Vulnerability
|
|
8. Novell Groupwise WebAccess Insecure Default Configuration
|
|
9. Novell Groupwise WebAccess Cross-Site Scripting Vulnerability
|
|
10. Novell Groupwise May Expose Usernames and Passwords
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
