HTTP: Novell GroupWise Admin Service FileUploadServlet Directory Traversal
This signature detects directory traversal attempts in Administration Service of Novell GroupWise 2014.A successful attack can lead to gain access to restricted files. This may lead to disclosure of sensitive information.
Extended Description
FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.
Affected Products
Novell groupwise
References
CVE: CVE-2014-0600
Short Name
HTTP:DIR:NOVELL-GROUPWSE-DIRTRA
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Admin CVE-2014-0600 Directory FileUploadServlet GroupWise Novell Service Traversal
Release Date
09/29/2014
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
Vendors
Novell
CVSS Score
7.8