Novell GroupWise WebAccess Arbitrary File Download

The installed version of GroupWise WebAccess fails to perform sufficient validation on a user specified file name supplied via 'filename' parameter before returning the contents of the file. By supplying directory traversal strings such as '../' in a specially crafted 'GET' request, it may be...

Novell GroupWise WebAccess Arbitrary File Download (local check)

The installed version of GroupWise WebAccess fails to perform sufficient validation on a user specified file name supplied via the 'filename' parameter before returning the contents of the file. By supplying directory traversal strings such as '../' in a specially crafted 'GET' request, it may be...

Novell GroupWise WebAccess Accessible

The remote web server is a Novell GroupWise WebAccess console. By allowing unauthenticated access to this web server, anyone may be able read status, configuration or log files pertaining to GroupWise WebAccess. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50693;...

Novell Groupwise multiple security vulnerabilities

Buffer overflow for stack buffer stack overrun on Webaccess Proxy feature. Buffer overflow in IMAP...

ZDI-10-135: Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities

ZDI-10-135: Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-10-135 July 20, 2010 -- CVSS: 4.3, AV:N/AC:M/Au:N/C:P/I:N/A:N -- Affected Vendors: Novell -- Affected Products: Novell GroupWise WebAccess -- TippingPointTM IPS...

Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary client side script on vulnerable installations of Novell Groupwise WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within handling html messages sent to a Novell Groupwise WebAccess...

{PRL} Novell Groupwise Webaccess Stack Overflow

Application: Novell Groupwise Webaccess Stack Overflow Platforms: Windows, Linux & Netware GroupWise 7.0, 7.01, 7.02, 7.03x, 7.04, 8.0, 8.01x Exploitation: Remote code execution CVE Number: Novell TID: 7006380 Author: Francis Provencher Protek Research Lab's WebSite:...

Novell Groupwise Webaccess Stack Overflow

Exploit for windows platform in category dos / poc ========================================= Novell Groupwise Webaccess Stack Overflow ========================================= Application: Novell Groupwise Webaccess Stack Overflow Platforms: Windows, Linux & Netware GroupWise 7.0, 7.01, 7.02,...

Novell Groupwise Webaccess - Stack Overflow

Novell Groupwise Webaccess - Stack Overflow Application: Novell Groupwise Webaccess Stack Overflow Platforms: Windows, Linux & Netware GroupWise 7.0, 7.01, 7.02, 7.03x, 7.04, 8.0, 8.01x Exploitation: Remote code execution CVE Number: Novell TID: 7006380 Author: Francis Provencher Protek Research...

Novell Groupwise Webaccess - Stack Overflow

Application: Novell Groupwise Webaccess Stack Overflow Platforms: Windows, Linux & Netware GroupWise 7.0, 7.01, 7.02, 7.03x, 7.04, 8.0, 8.01x Exploitation: Remote code execution CVE Number: Novell TID: 7006380 Author: Francis Provencher Protek Research Lab's Blog: http://www.protekresearchlab.com...

VMware WebAccess Cross Site Scripting vulnerability (Windows)

This host is installed with VMWare Server and is prone to Cross site scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareserverwebaccessxssvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware WebAccess Cross Site Scripting Vulnerability Windows Authors: Antu Sanadi Copyright:...

VMware WebAccess Multiple Vulnerabilities (Windows)

This host is installed with VMWare Server and is prone to multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareserverwebaccessmultvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware WebAccess Multiple Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2010...

VMware WebAccess Multiple Vulnerabilities - Windows

VMWare Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware WebAccess 1.0 XSS Vulnerability - Linux

VMWare Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware WebAccess Multiple Vulnerabilities - Linux

VMWare Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware WebAccess 1.0 XSS Vulnerability - Windows

VMWare Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware ESX WebAccess Context Data XSS (VMSA-2010-0005)

The version of WebAccess hosted on the remote VMware ESX server has a cross-site scripting vulnerability. It is possible to specify which XML web service to use for a given session by passing a specially crafted value to the 'view' parameter of '/ui/vmDirect.do'. A remote attacker could exploit...

VMware WebAccess URL转发安全漏洞

BUGTRAQ ID: 39103 CVE ID: CVE-2010-0686 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare的WebAccess组件没有充分地验证用户所提供的输入，允许将入站请求转发到其他目的地。所转发的目标无法看到请求URL的真实来源，只能看到运行WebAccess的机器地址。攻击者可以利用这个转发漏洞伪造源址定向服务器上通讯。 VMWare Server 2.0 VMWare VirtualCenter 2.5 VMWare VirtualCenter 2.0.2 VMWare ESX 3.5...

Spoofing

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine...