CVE-2013-1085: Buffer Overflow
Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1085?
CVE-2013-1085 has a high severity rating due to its ability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2013-1085?
To remediate CVE-2013-1085, update Novell GroupWise Messenger to version 2.2.2 or later and Novell Messenger to version 2.2.2 or later.
What type of vulnerability is CVE-2013-1085?
CVE-2013-1085 is a stack-based buffer overflow vulnerability.
Which software versions are affected by CVE-2013-1085?
CVE-2013-1085 affects Novell GroupWise Messenger up to version 2.0.4 and Novell Messenger versions up to 2.2.1.
Can CVE-2013-1085 be exploited remotely?
Yes, CVE-2013-1085 can be exploited remotely through a crafted import command containing a long string in the filename parameter.