GroupWise Web Interface 'HELP' Information Disclosure Vulnerability

By modifying the GroupWise Web Interface HELP URL request, it is possible to gain additional information on the remote computer and even read local files from its hard drive. SPDX-FileCopyrightText: 2002 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are...

CVE-2005-2804

Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers to cause a denial of service application crash via a large TCP/IP port in the Windows registry key...

CVE-2005-2804

CVE-2005-2804 describes an Integer overflow in the registry parsing code of GroupWise 6.5.3 (and possibly earlier versions) that could be triggered by a large TCP/IP port value stored in a Windows registry key. This flaw allows remote attackers to cause an application crash (denial of service). T...

CVE-2005-2804

Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers to cause a denial of service application crash via a large TCP/IP port in the Windows registry key...

Novell Groupwise Client 6.5.3 - Local Integer Overflow

Novell Groupwise Client 6.5.3 - Local Integer Overflow source: https://www.securityfocus.com/bid/14952/info Novell GroupWise Client is prone to a local integer overflow vulnerability. The attacker may leverage this issue to corrupt process memory, which may lead to a crash or arbitrary code...

Novell Groupwise Client 6.5.3 - Local Integer Overflow

source: https://www.securityfocus.com/bid/14952/info Novell GroupWise Client is prone to a local integer overflow vulnerability. The attacker may leverage this issue to corrupt process memory, which may lead to a crash or arbitrary code execution. A complete compromise of the affected system may ...

Novell GroupWise client memory cleartext passwords

Cahed password is stored cleartext in memory...

NOVL-2005010098073 GroupWise Password Caching

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2005-10098073 Title: GroupWise Password Caching Date: 16-August-2005 Revision: Original Product Name: GroupWise 5.x, 6.x OS/Platforms:...

CVE-2005-2620

grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory...

CVE-2005-2620

grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory...

CVE-2005-2620

The CVE affects Novell GroupWise Windows clients (5.x–6.5.2) where the grpWise.exe process stores passwords in plaintext in memory. This allows a local attacker with access (e.g., via memory dump/read mechanisms or a debugger) to recover credentials. The issue is a memory-credential caching probl...

CVE-2004-2336

Technical details (affected product/version, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2004-2336

Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server...

CVE-2005-2346

Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a long entry, as demonstrated using a long ES02TKS.VEW value in the Group Task section...

CVE-2005-2346

CVE-2005-2346 describes a buffer overflow in the Novell GroupWise 6.5 Client that can be triggered by a crafted GWVW02xx.INI language file (long ES02TKS.VEW value in Group Task section), allowing remote code execution. The affected product is the GroupWise 6.5 Client; the underlying issue is a un...

CVE-2005-2346

Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a long entry, as demonstrated using a long ES02TKS.VEW value in the Group Task section...

CVE-2005-2276

The embedded sources confirm CVE-2005-2276 affects Novell GroupWise WebAccess 6.5 (pre‑July 11, 2005). The vulnerability is a cross‑site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML by sending an email containing an encoded javascript URI, e.g. j&#X41vascript in an IMG ...

CVE-2005-2276

Cross-site scripting XSS vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI e.g. "j&X41vascript" in an IMG tag...

CVE-2005-2276

Cross-site scripting XSS vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI e.g. "j&X41vascript" in an IMG tag...

GroupWise WebAccess < 6.5 SP5 EMail IMG SRC XSS

Binary data 3087.prm...