2705 matches found
CVE-2005-2276
Cross-site scripting XSS vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI e.g. "j&X41vascript" in an IMG tag...
Novell GroupWise WebAccess Email IMG SRC XSS
The remote host is running a version of GroupWise WebAccess from Novell that fails to sanitize email messages of HTML and script code embedded in IMG tags. An attacker can exploit this flaw to launch cross-site scripting attacks against users of WebAccess by sending them specially crafted email...
GroupWise WebAccess < 6.5 SP5 EMail IMG SRC XSS
Binary data 3087.prm...
Novell GroupWise WebAccess multiple bugs
Crossite scripting, unauthorized access...
Novell Groupwise 6.5 Webaccess - HTML Injection
Novell Groupwise 6.5 Webaccess - HTML Injection source: https://www.securityfocus.com/bid/14310/info Novell GroupWise WebAccess is prone to an HTML injection vulnerability. This may be used to inject hostile HTML and script code into the Web mail application. When a user opens an email containing...
Novell Groupwise 6.5 Webaccess - HTML Injection
source: https://www.securityfocus.com/bid/14310/info Novell GroupWise WebAccess is prone to an HTML injection vulnerability. This may be used to inject hostile HTML and script code into the Web mail application. When a user opens an email containing the hostile code, it may be rendered in their...
Novell GroupWise WebAccess Detection
Binary data 2731.prm...
CVE-2005-0296
CVE-2005-0296 affects Novell GroupWise WebAccess. The error handler allows unauthenticated remote reading of sensitive info (e.g., product version) via manipulated error or modify parameters that return template files or the about page. Vendor has disputed the issue. Connected sources provide no ...
[Full-Disclosure] NOVL-2005-10096251 GroupWise WebAccess error handling modules (report)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2005-10096251 Title: GroupWise WebAccess Error modules loading report Date: 21-January-2005 Revision: Original Product Name: GroupWise...
CVE-2005-0296
NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified 1 error or 2 modify parameter that returns...
[Full-Disclosure] Novell GroupWise WebAccess error modules loading
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear ladies and gentlemen We have found a potential security vulnerability in the Novell GroupWise WebAccess error module handling. First of all it is possible to circumvent the login procedure. If a user connects to...
PT-2005-1374 · Novell · Novell Groupwise Webaccess
Name of the Vulnerable Software and Affected Versions: Novell GroupWise WebAccess affected versions not specified Description: The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an...
Novell GroupWise 6.5.3 WebAccess Multiple XSS
The remote host is running Novell GroupWise WebAccess, a commercial groupware package. The remote version of this software is affected by multiple cross-site scripting flaws due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to use the...
Novell GroupWise WebAccess WebAccessUninstall.ini Information Disclosure
The remote host is running Novell GroupWise WebAccess, a commercial groupware package. The remote version of this software has an information disclosure vulnerability. An attacker may request the file '/com/novell/webaccess/WebAccessUninstall.ini' and will obtain some information about the remote...
[NEWS] GroupWise WebAccess File Disclosure (GWAPACHE.CONF)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2003-1551
Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."...
CVE-2001-1232
CVE-2001-1232 affects GroupWise WebAccess 5.5. The issue arises when directory indexing is enabled, allowing a remote attacker to view arbitrary directory contents via an HTTP request using a lowercase “get.” The vulnerability description—as shown in multiple sources (NVD, CVE List, CVE Record)—i...
CVE-2001-1233
Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services NDS enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm...
CVE-2001-1233
Netware Enterprise Web Server 5.1 with GroupWise WebAccess 5.5 and NDS enabled is affected. The vulnerability allows remote attackers to enumerate usernames, group names and other system information by accessing ndsobj.nlm, due to exposure of directory information. CVSS v2.0 base score is 5.0 (AV...