Novell GroupWise WebAccess Email IMG SRC XSS

The remote host is running a version of GroupWise WebAccess from Novell that fails to sanitize email messages of HTML and script code embedded in IMG tags. An attacker can exploit this flaw to launch cross-site scripting attacks against users of WebAccess by sending them specially crafted email...

Novell GroupWise WebAccess multiple bugs

Crossite scripting, unauthorized access...

[Full-disclosure] [ISR] - Novell Groupwise WebAccess Cross-Site Scripting

|| || ISR || Infobyte Security Research || www.infobyte.com.ar || 07.19.2005 || .:: SUMMARY Novell Groupwise WebAccess Cross-Site Scripting Version: GroupWise 6.5 SP4, It is suspected that all previous versions of Groupwise WebAccess are vulnerable. .:: BACKGROUND GroupWise WebAccess is Novell's...

Novell Groupwise 6.5 Webaccess - HTML Injection

Novell Groupwise 6.5 Webaccess - HTML Injection source: https://www.securityfocus.com/bid/14310/info Novell GroupWise WebAccess is prone to an HTML injection vulnerability. This may be used to inject hostile HTML and script code into the Web mail application. When a user opens an email containing...

Novell Groupwise 6.5 Webaccess - HTML Injection

source: https://www.securityfocus.com/bid/14310/info Novell GroupWise WebAccess is prone to an HTML injection vulnerability. This may be used to inject hostile HTML and script code into the Web mail application. When a user opens an email containing the hostile code, it may be rendered in their...

FreeBSD : gaim -- heap overflow exploitable by malicious GroupWise server (e16293f0-26b7-11d9-9289-000c41e2cdad)

Sean infamous42md reports that a malicious GroupWise messaging server may be able to exploit a heap buffer overflow in gaim, leading to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

Novell Groupwise Client memory cleartext password

Cleartext password is stored in memory...

Novell GroupWise Plain Text Password Vulnerability.

-------------------------------------------- Novell GroupWise Plain Text Password Vulnerability. -------------------------------------------- Overview: A Vulnerability exsists in the Novell GroupWise Client that will allow an attacker to identify the id and password of the users GroupWise email...

CVE-2001-1458

Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" dot dot sequences and a null character...

CVE-2001-1458

Novell GroupWise WebAcc is affected by a directory traversal vulnerability that enables an attacker to read arbitrary files via a crafted request to /servlet/webacc?User.html= containing "../" sequences and a null character. The OpenVAS content disclosure note confirms the WebAcc Servlet exposes ...

Novell GroupWise WebAccess Detection

Binary data 2731.prm...

CVE-2005-0296

CVE-2005-0296 affects Novell GroupWise WebAccess. The error handler allows unauthenticated remote reading of sensitive info (e.g., product version) via manipulated error or modify parameters that return template files or the about page. Vendor has disputed the issue. Connected sources provide no ...

CVE-2005-0296

NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified 1 error or 2 modify parameter that returns...

[Full-Disclosure] NOVL-2005-10096251 GroupWise WebAccess error handling modules (report)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2005-10096251 Title: GroupWise WebAccess Error modules loading report Date: 21-January-2005 Revision: Original Product Name: GroupWise...

CVE-2005-0296

NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified 1 error or 2 modify parameter that returns...

[Full-Disclosure] Novell GroupWise WebAccess error modules loading

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear ladies and gentlemen We have found a potential security vulnerability in the Novell GroupWise WebAccess error module handling. First of all it is possible to circumvent the login procedure. If a user connects to...

PT-2005-1374 · Novell · Novell Groupwise Webaccess

Name of the Vulnerable Software and Affected Versions: Novell GroupWise WebAccess affected versions not specified Description: The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an...

Novell GroupWise WebAccess Error Handler Authentication Bypass

The remote host is running Novell GroupWise WebAccess, a commercial groupware package. The remote version of this software is prone to an authentication bypass attack. An attacker requesting : /servlet/webacc?error=webacc may bypass the authentication mechanism and gain access to the groupware...

Novell GroupWise WebAccess WebAccessUninstall.ini Information Disclosure

The remote host is running Novell GroupWise WebAccess, a commercial groupware package. The remote version of this software has an information disclosure vulnerability. An attacker may request the file '/com/novell/webaccess/WebAccessUninstall.ini' and will obtain some information about the remote...

Novell GroupWise 6.5.3 WebAccess Multiple XSS

The remote host is running Novell GroupWise WebAccess, a commercial groupware package. The remote version of this software is affected by multiple cross-site scripting flaws due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to use the...