Novell GroupWise GWWEB.EXE Multiple Vulnerabilities

The HELP function in GWWEB.EXE will reveal the path of the server, and combined with the '../' string, allow read access for any client to any .htm file on the server, as well as browseable directory listings.

Also, it is possible to abend GWINTER.NLM by specifying a long string where the server expects a variable setting.


 

Privacy Statement
Copyright 2010, SecurityFocus