Novell Groupwise contains protocol implementation vulnerability allowing email to be viewed by unauthorized user

Overview Novell GroupWise is an email storage program. Email is encrypted when stored. Usernames and passwords can be acquired by sniffing communications between the client and server. Description In Novell GroupWise email is stored as encrypted data. Clients and servers operating in Live Remote ...

Дефолтный пароль в Novell Groupwise Servlett Manager (default password)

По-умолчанию исопльзуется username servlet password manager...

CVE-2001-1195

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges...

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication source: https://www.securityfocus.com/bid/3697/info Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote...

GroupWise Padlock Speculative Info

---------------------- GroupWise Padlock Info ---------------------- History ------- Novell was notified by someone around the 6th of August about a security flaw in GroupWise that apparently allowed basically anyone with access to the GroupWise server to do "bad stuff". August 14th brought the...

Novell Groupwise arbitrary file retrieval vulnerability

FS Advisory ID: FS-101501-20-GWSE Release Date: October 15, 2001 Product: Novell GroupWise Vendor: Novell http://www.novell.com Vendor Advisory: See vendor website. Type: Arbitrary file retrieval vulnerability Severity: High Author: Mike Shema [email protected] Foundstone, Inc...

Обратный путь в Novell Groupwise (directory traversal)

Компонента Webacc позволяет обратиться к любому файлу в системе...

CVE-2001-1458

Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" dot dot sequences and a null character...

Проблеимы с NetWare Enterprise Web Server (information leak, directory reading)

При установленном GroupWise WebAccess возможно получение листинга каталога и списка системных объектов...

Groupwise Webaccess, NetWare web server, and Novell

No idea if this is what the Groupwise Padlock http://www.novell.com/padlock thing is about, since Novell is not only vague in the issues, but never acknowledged Adept's findings. - Simple Nomad - "No rest for the Wicca'd" - - [email protected] - - - [email protected] - www.nmrc.org...

groupwise.disclosure.txt

No idea if this is what the Groupwise Padlock http://www.novell.com/padlock thing is about, since Novell is not only vague in the issues, but never acknowledged Adept's findings. - Simple Nomad - "No rest for the Wicca'd" - - [email protected] - - - [email protected] - www.nmrc.org...

CVE-2001-1233

Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services NDS enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm...

CVE-2001-1232

GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get"...

CVE-2001-1231

GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the "Padlock" fix...

CVE-2001-0355

Novell Groupwise 5.5 sp1 and sp2 allows a remote user to access arbitrary files via an implementation error in Groupwise system policies...

GroupWise 5.5 User Mailbox Authentication Vulnerability

Advisory ID Internal CORE-2001-0626 GroupWise 5.5 User Mailbox Authentication Vulnerability Core Security Advisory https://www.coresecurity.com Date Published: 2001-06-26 Advisory ID: CORE-2001-0626 Bugtraq ID: None currently assigned. CVE Name: None currently assigned. Title: GroupWise 5.5 User...

CVE-2001-0355

The CVE-2001-0355 entry affects Novell GroupWise 5.5 (service packs 1 and 2). The vulnerability arises from an implementation error in GroupWise system policies that allows a remote attacker to access arbitrary files. The connected documents confirm the affected product and the root cause (policy...

CVE-2001-0355

Novell Groupwise 5.5 sp1 and sp2 allows a remote user to access arbitrary files via an implementation error in Groupwise system policies...

CVE-2001-0355: Undefined Security Weakness

Novell Groupwise 5.5 sp1 and sp2 allows a remote user to access arbitrary files via an implementation error in Groupwise system policies...

Novell Groupwise Client Vulnerability

Novell GroupWise Client read file/view vulnerability gw5.5epsp2--file view problems-- OS Affected Win 95/98/NT/2000/ME all sp levels Programs Affected GroupWise 5.5ep sp1 other versions of GroupWise 5 are probably vulnerable Discussion with zen polices or NT Polices installed properly on a window...