Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2013.0142
Two vulnerabilities have been identified in Novell GroupWise
1 February 2013
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Novell GroupWise
Publisher: Novell
Operating System: Windows
Impact/Access: Execute Arbitrary Code/Commands -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2013-0804 CVE-2012-0439
Original Bulletin:
http://www.novell.com/support/kb/doc.php?id=7011687
http://www.novell.com/support/kb/doc.php?id=7011688
Comment: This bulletin contains two (2) Novell security advisories.
- --------------------------BEGIN INCLUDED TEXT--------------------
Security Vulnerability: GroupWise Client for Windows Remote Untrusted Pointer
Dereference Vulnerability
This document (7011687) is provided subject to the disclaimer at the end of
this document.
Document ID: 7011687
Creation Date: 01-23-2013
Modified Date: 01-30-2013
Novell GroupWise
Environment
GroupWise Client for Windows 8.0x up to and including 8.0.3 HP1
GroupWise Client for Windows 2012 up to and including 2012.0 SP1
Situation
The GroupWise Client for Windows is vulnerable to multiple untrusted pointer
dereference vulnerabilities, which could be exploited by a remote attacker to
compromise a vulnerable system.
Resolution
To resolve this vulnerability, apply GroupWise 8.0.3 Hot Patch 2 (or later) or
GroupWise 2012 SP1 Hot Patch 1.
Previous versions of the GroupWise Client for Windows are likely also
vulnerable but are no longer supported. Customers on earlier versions of
GroupWise should, at a minimum, upgrade their GroupWise clients to version
8.0.3 HP2 or 2012 SP1 Hot Patch 1 in order to secure their system.
Novell would like to thank High-Tech Bridge Security Research Lab
(https://www.htbridge.com/advisory/HTB23131) for discovery and responsible
disclosure of this vulnerability.
Novell bug 792535, CVE-2013-0804
Status Security Alert
Bug Number 792535
Disclaimer
This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE
customers and parties interested in our products and solutions to acquire
information, ideas and learn from one another. Materials are provided for
informational, personal or non-commercial use within your organization and are
presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
==============================================================================
Security Vulnerability: GroupWise Client for Windows ActiveX Control
Vulnerability
This document (7011688) is provided subject to the disclaimer at the end of
this document.
Environment
GroupWise Client for Windows 8.0x up to and including 8.0.3 HP1
GroupWise Client for Windows 2012 up to and including 2012.0 SP1
Situation
The GroupWise Client for Windows is vulnerable to an ActiveX Control exploit
where by enticing a target user to open a malicious file or visit a malicious
page, a remote attacker could execute arbitrary code on vulnerable
installations of Novell GroupWise.
Resolution
To resolve this vulnerability, apply GroupWise 8.0.3 Hot Patch 2 (or later) or
GroupWise 2012 SP1 Hot Patch 1.
Previous versions of the GroupWise Client for Windows are likely also
vulnerable but are no longer supported. Customers on earlier versions of
GroupWise should, at a minimum, upgrade their GroupWise clients to version
8.0.3 HP2 or 2012 SP1 Hot Patch 1 in order to secure their system.
This vulnerability was discovered by Andrea Micalizzi aka rgod working with HP
Enterprise Security's Zero Day Initiative (http://www.zerodayinitiative.com),
ZDI-CAN-1329
Novell bugs 712144, 743674, CVE-2012-0439
Status
Security Alert
Bug Number
712144 743674
Disclaimer
This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE
customers and parties interested in our products and solutions to acquire
information, ideas and learn from one another. Materials are provided for
informational, personal or non-commercial use within your organization and are
presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQIVAwUBUQtAJO4yVqjM2NGpAQLOKA/8C99F/1Yg6fJ+XUH+18Yffr5psbCUeL/N
as5jWocPEHG8JKdeoyn0SprlBlZs34BqUtTry0U1HdmYt8hC4p9jXPGQw02d3YNt
T3ENnLTYK8AeIedt8PbbeGa2sZlQainLRBeAvCFxRmm7q5pi5k28qFdDJyxNSENk
uTsxYBFFm65emgRoUuv8Ax5rHRS9JK3E/zT/Ry+x3e2tuRjm++Iub8ZM/vPA88af
oOcUksUGmqKYmF/ph8Dznz7MXew8hjuF+Ff3gyIdI4XU+/IomaFXuw1LSw4u4Vg4
eFAU1vU408IFd6FRdTh85hVQj1qWd7msr9hRke2AaclhzXU9PMhU4pmlQQjs8yu0
bgdg7WIcAI53vaji8PQwE73ZmxTeTOS9Ok+1pcqY55TYJUPhpOZSdRk5PnrdwFZI
uzmvkmehv6ie6FPTrL4jTADH8/4BhV15tQNGepBfhgQgSfji211uCO/uV5zabVPG
JLbVzKU+//KVPjIUQBTe4Yj97vwIIX9qBOs2mAPkgCXS6zq+Leg9IyVinjS7Ingy
l0J91hdK4FtO0gklCiaa8cbzJjBDmczaJjAFpWXdquTeVEciiDcoRrZV/+fomMNn
mTDiHpMhzRnJUCC0QSChQ4O8p68V8MyN3wKwbjgaUGYOYsbrIJ9nps0oQv/dnWf8
kBej7TsAa9s=
=OOn5
-----END PGP SIGNATURE-----