Novell Groupwise Windows客户端API非授权邮件访问漏洞

BUGTRAQ ID: 18716 CVECAN ID: CVE-2006-3268 Novell GroupWise是一款跨平台协作软件。 Novell GroupWise的客户端API实现上存在漏洞，攻击者可能利用漏洞绕过安全限制，访问某些非授权的邮件。 Novell Groupwise 7.x Novell Groupwise 6.x Novell Groupwise 5.x 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： GroupWise 6.5: Apply SP6 Client Update 1...

Novell GroupWise Windows Client Arbitrary Email Access

The remote host is running GroupWise, an enterprise-class collaboration application from Novell. The version of GroupWise installed on the remote host contains a flaw in the client API that may allow a user to bypass security controls and gain access to non-authorized email within the same...

CVE-2006-3268

CVE-2006-3268 describes a vulnerability in the Windows client API of Novell GroupWise (5.x–7) that may allow an attacker to bypass security controls and access non-authorized email within the same authenticated post office. According to Novell’s advisory, GroupWise 7 must be upgraded to SP1 and G...