Novell GroupWise 6.5.3 WebAccess Multiple XSS

The remote host is running Novell GroupWise WebAccess, a commercial groupware package. The remote version of this software is affected by multiple cross-site scripting flaws due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to use the...

Novell GroupWise WebAccess WebAccessUninstall.ini Information Disclosure

The remote host is running Novell GroupWise WebAccess, a commercial groupware package. The remote version of this software has an information disclosure vulnerability. An attacker may request the file '/com/novell/webaccess/WebAccessUninstall.ini' and will obtain some information about the remote...

CVE-2004-2336

Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server...

gaim -- multiple buffer overflows

Sean infamous42md reports several situations in gaim that may result in exploitable buffer overflows: Rich Text Format RTF messages in Novell GroupWise protocol Unsafe use of gethostbyname in zephyr protocol URLs which are over 2048 bytes long once decoded...

gaim -- heap overflow exploitable by malicious GroupWise server

Sean infamous42md reports that a malicious GroupWise messaging server may be able to exploit a heap buffer overflow in gaim, leading to arbitrary code execution...

Novell GroupWise Internet Mail Server Detection

Binary data 1156.prm...

Novell Groupwise Messenger server

Binary data 4535.prm...

Novell Groupwise Servlet Manager Default Password

The Novell Groupwise servlet server is configured with a default password. As a result, users could be denied access to mail and other servlet based resources. To test this finding: https:///servlet/ServletManager/ enter 'servlet' for the user and 'manager' for the password. This script was writt...

[NEWS] GroupWise WebAccess File Disclosure (GWAPACHE.CONF)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2003-1551

Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."...

Novell GroupWise Internet Agent 6.5.1

Novacoast Security Advisory Novell GroupWise 6.5 Vulnerability Synopsis: Novacoast has discovered a vulnerability in the Novell GroupWise 6.5 Wireless Webaccess logging functionality. The software exposes all username and passwords within the log file in clear text. This information could be used...

Novell groupwise cleartext passwords

Passwords are logged to file in cleartext...

CVE-2002-1088

The CVE-2002-1088 entry is about a buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 that allows remote attackers to execute arbitrary code through a long RCPT TO command. Affected component: the GroupWise 6.0.1 SP1 environment; root cause described as a buffer overflow in handling RCPT TO...

CVE-2002-1088

Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command...

CVE-2002-1088: Undefined Security Weakness

Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command...

CVE-2002-1088

Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command...

Novell GroupWise Server web-based front-end does not adequately validate user input thereby allowing directory traversal

Overview Novell GroupWise web application does not adequately validate user input, allowing directory traversal. Description Novell GroupWise server includes a web application that allows users to access e-mail and other features of the server. This component of GroupWise does not properly valida...

Novell GroupWise 6.0.1 Support Pack 1 Bufferoverflow

----------------------------------------------------------------------- Title: Novell GroupWise 6.0.1 Support Pack 1 Bufferoverflow Author: Marco van Berkum Classification: High risk Date: 25/07/2002 Email: [email protected] Company: OBIT Company site: http://www.obit.nl Personal website:...

Buffer overflow in Novell GroupWise

Buffer overflow in RCPT SMTP command...

CVE-2001-1231

GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the "Padlock" fix...