EUVD-1999-0986

Malware in sbrugna...

Netscape Enterprise Server ,Novell Groupwise 5.2/5.5 GWWEB.EXE Multiple Vulnerabilities

No description provided by source. Netscape Enterprise Server for NetWare 4/5 3.0.7 a,Novell Groupwise 5.2/5.5 GWWEB.EXE Multiple Vulnerabilities source: http://www.securityfocus.com/bid/879/info The HELP function in GWWEB.EXE will reveal the path of the server, and combined with the '../' string...

CVE-2002-0341: Undefined Security Weakness

GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter...

CVE-1999-1005: Undefined Security Weakness

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. dot dot attack using the HELP parameter...

CVE-1999-1006

The OpenVAS entry for CVE-1999-1006 documents a GroupWise Web Interface vulnerability in GWWEB.EXE where manipulating the HELP URL request yields information disclosure, including reading local files on the remote host. This confirms the vulnerability class as an information disclosure via a web ...

CVE-1999-1006: Undefined Security Weakness

Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter...

groupwise.web.txt

Problems found with GroupeWise web server Novell was contacted 3 weeks ago and no reply ----------------------------------------------------------------- 1. The help argument in GWWEB.EXE reveal full web path on the server 2. anyone can read a .htm file on the system with the GWWEB.EXE and the HE...