Title: Novell GroupWise GWWEB.EXE Multiple Vulnerabilities
Severity: MODERATE
Description:
The HELP function in GWWEB.EXE will reveal the path of the server, and combined with the '../' string, allow read access for any client to any .htm file on the server, as well as browseable directory listings.
Also, it is possible to abend GWINTER.NLM by specifying a long string where the server expects a variable setting.
Affected Products:
- Netscape Enterprise Server for NetWare 4/5 3.0.7a
- Novell Groupwise 5.2.0
- Novell Groupwise 5.5.0
References:
- Novell: Novell GroupWise Homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
