Lucene search

K
cve[email protected]CVE-2007-3571
HistoryJul 05, 2007 - 7:30 p.m.

CVE-2007-3571

2007-07-0519:30:00
web.nvd.nist.gov
26
cve-2007-3571
apache web server
novell netware
groupwise
information disclosure
security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.2%

The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive information via a certain directive to Apache that causes the HTTP-Header response to be modified, which may reveal the server’s internal IP address.

Affected configurations

NVD
Node
novellnetwareMatch6.5
AND
novellgroupwiseMatch6.0
OR
novellgroupwiseMatch6.0sp1
OR
novellgroupwiseMatch6.0sp2
OR
novellgroupwiseMatch6.0sp3
OR
novellgroupwiseMatch6.0sp4
OR
novellgroupwiseMatch6.0.1sp1
OR
novellgroupwiseMatch6.5
OR
novellgroupwiseMatch6.5sp1
OR
novellgroupwiseMatch6.5sp2
OR
novellgroupwiseMatch6.5sp3
OR
novellgroupwiseMatch6.5sp4
OR
novellgroupwiseMatch6.5sp5
OR
novellgroupwiseMatch6.5sp6
OR
novellgroupwiseMatch6.5.2
OR
novellgroupwiseMatch6.5.3
OR
novellgroupwiseMatch6.5.4
OR
novellgroupwiseMatch7.0
OR
novellgroupwiseMatch7.0sp1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.2%

Related for CVE-2007-3571