📚 Novell GroupWise Client up to 2012.0 SP1 Pointer os command injection

A vulnerability was found in Novell GroupWise Client up to 2012.0 SP1 (Groupware Software). It has been rated as very critical. Affected by this issue is an unknown functionality of the component Pointer Handler. Upgrading to version 8.0.3 eliminates this vulnerability. Applying the patch 2012 SP1 HP1 is able to eliminate this problem. The best possible mitigation is suggested to be patching the affected component. A possible mitigation has been published immediately after the disclosure of the vulnerability. Furthermore it is possible to detect and prevent this kind of attack with TippingPoint and the filter 13029. ...