Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Novell GroupWise GWWEB.EXE Multiple Vulnerabilities

The HELP function in GWWEB.EXE will reveal the path of the server, and combined with the '../' string, allow read access for any client to any .htm file on the server, as well as browseable directory listings.

Also, it is possible to abend GWINTER.NLM by specifying a long string where the server expects a variable setting.







 

Privacy Statement
Copyright 2009, SecurityFocus