CVE-2012-0410: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter...

PT-2012-2552

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions prior to 8.03 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by manipulating the User.interface parameter. Recommendations For versions prior to 8.03, update to versi...