CVE-2002-0303

GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password...

CVE-2001-1232

GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get"...

CVE-2001-1233

Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services NDS enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm...

CVE-2001-1232

CVE-2001-1232 affects GroupWise WebAccess 5.5. The issue arises when directory indexing is enabled, allowing a remote attacker to view arbitrary directory contents via an HTTP request using a lowercase “get.” The vulnerability description—as shown in multiple sources (NVD, CVE List, CVE Record)—i...

CVE-2001-1233

Netware Enterprise Web Server 5.1 with GroupWise WebAccess 5.5 and NDS enabled is affected. The vulnerability allows remote attackers to enumerate usernames, group names and other system information by accessing ndsobj.nlm, due to exposure of directory information. CVSS v2.0 base score is 5.0 (AV...

CVE-2002-0303

CVE-2002-0303 affects Novell GroupWise 6 when using LDAP authentication and the Post Office has a blank username and password. The vulnerability allows an attacker to log in without a password and gain privileges of other users. Root cause described in the public description is an authentication ...

CVE-2002-0341

GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter...

CVE-2001-1195

CVE-2001-1195 affects Novell GroupWise Servlet Manager (groupwise servlet server) with default credentials. Connected sources confirm that a default username/password (e.g., servlet/manager) enables remote attackers to access the servlet manager and potentially gain privileges. The OpenVAS entrie...

CVE-2001-1195

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges...

Доступ без пароля в Novell Groupwise (unauthorized access)

Можно подключиться через LDAP с пустым паролем...

Security issue with GroupWise 6 and LDAP authentication in PostOffice

Issue: Any user can login into any GroupWise account. Environment: GroupWise 6 Post Office using LDAP authentication AND security configuration of PostOffice leaves LDAP User Name and Password fields blank in the Post Office Agent object in ConsoleOne. Exploit: Run GroupWise as any user either...

Novell Groupwise contains protocol implementation vulnerability allowing email to be viewed by unauthorized user

Overview Novell GroupWise is an email storage program. Email is encrypted when stored. Usernames and passwords can be acquired by sniffing communications between the client and server. Description In Novell GroupWise email is stored as encrypted data. Clients and servers operating in Live Remote ...

Дефолтный пароль в Novell Groupwise Servlett Manager (default password)

По-умолчанию исопльзуется username servlet password manager...

CVE-2001-1195

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges...

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication source: https://www.securityfocus.com/bid/3697/info Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote...

GroupWise Padlock Speculative Info

---------------------- GroupWise Padlock Info ---------------------- History ------- Novell was notified by someone around the 6th of August about a security flaw in GroupWise that apparently allowed basically anyone with access to the GroupWise server to do "bad stuff". August 14th brought the...

Обратный путь в Novell Groupwise (directory traversal)

Компонента Webacc позволяет обратиться к любому файлу в системе...

Novell Groupwise arbitrary file retrieval vulnerability

FS Advisory ID: FS-101501-20-GWSE Release Date: October 15, 2001 Product: Novell GroupWise Vendor: Novell http://www.novell.com Vendor Advisory: See vendor website. Type: Arbitrary file retrieval vulnerability Severity: High Author: Mike Shema [email protected] Foundstone, Inc...

CVE-2001-1458

Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" dot dot sequences and a null character...

Проблеимы с NetWare Enterprise Web Server (information leak, directory reading)

При установленном GroupWise WebAccess возможно получение листинга каталога и списка системных объектов...