|
Novell Groupwise 6 SP3 fixes multiple issues
|
|
Secunia Advisory:
|
SA8602
|
|
|
Release Date:
|
2003-04-16
|
|
Popularity:
|
6,674 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Novell Groupwise 6.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
Novell has released Groupwise 6 Support Pack 3. This fixes a security issue in OpenSSL, which can be exploited to cause a DoS (Denial of Service) on the MTA. Multiple other issues has also been fixed, where some potentially could be security related.
The following issues could pose as security risks. This has not been confirmed, though.
Admin API Fixes:
- Fixed a memory leak.
Agent Fixes:
- A high-utilization problem with the POA has been fixed.
- Intruder detection is properly honored when LDAP authentication is in use.
- Several POA abends have been fixed.
- The MTA includes a newer version of OpenSSL that prevents a "denial of service" type of security attack.
- Several MTA abends have been fixed.
Client Fixes:
- POP3 authentication has been enhanced.
Internet Agent Fixes:
- The Internet Agent correctly processes messages with extremely long subject lines in compliance with RFC2822.
- In the context of a foreign post office with an alias, messages are no longer being relayed because of incorrect message format.
- The Internet Agent no longer shuts down if it encounters a bad message that generates an unknown error code.
- Fixed several Internet Agent memory leaks.
- Fixed several Internet Agent abends.
Solution:
Apply Service Pack 3.
GroupWise 6 Support Pack 3 Multi-lan:
http://support.novell.com/servlet/filedownload/pub/gw6sp3m.exe
GroupWise 6 Support Pack3 Multi-56 bit:
http://support.novell.com/servlet/filedownload/pub/gw6sp3m_56.exe
GroupWise 6 Support Pack3 EEAL 128 bit:
http://support.novell.com/servlet/filedownload/pub/gw6sp3eeal.exe
Original Advisory:
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2965454.htm
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
10th Oct, 2008
|
New advisories:
|
15 |
|
New vulnerabilities:
|
83 |
|
Updated advisories:
|
41 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 Solutions | More...
|
|
