Novell GroupWise Web Root Disclosure Vulnerability

Novell GroupWise Web Root Disclosure Vulnerability

Novell GroupWise is an email, calendaring and collaborative application available from Novell. It is designed for use on the Microsoft Windows and Novell Netware platforms, and includes a web access component for use through a web browser.

A vulnerability has been reported in some versions of GroupWise. Reportedly, if a maliciously formatted web request is submitted to the GWWEB.EXE cgi process, an error message will be returned. This error message will include the full path of the script.

Other versions of GroupWise may share this vulnerability. This has not, however, been confirmed.