EUVD-2014-0631

Malware in sbrugna...

CVE-2014-0600: Exposure of Sensitive Information to an Unauthorized Actor

FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287...

PT-2014-3700

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions prior to 2014 SP1 Description The issue allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter in the FileUploadServlet of the Administration service. This could...