Novell GroupWise Internet Agent Integer Overflow Vulnerability

A vulnerability has been identified in Novell GroupWise Internet Agent. A remote user can execute arbitrary code on the target system.

A remote user can send a specially crafted request with the HTTP 'Content-Length' header value of '-1' to the administration interface via TCP port 9850 to trigger an integer overflow and execute arbitrary code on the target system. The code will run with the privileges of the target service.

Note: Vendor patch is not available.