Novell GroupWise WebAccess Unauthorized Access Vulnerability

Novell GroupWise WebAccess Unauthorized Access Vulnerability

Solution:
The following solution has been provided by Novell:

To prevent unauthorized access to a GroupWise WebAccess server, you can edit the permissions section of the GWAPACHE.CONF file just under where the DocumentRoot is specified:

By default, that section reads:

# First, we configure the "default" to be a very restrictive set of
# permissions.
#
<Directory "/">
Options FollowSymLinks
AllowOverride None
</Directory>

That section should read:

<Directory "/">
Options FollowSymLinks
AllowOverride None
Order deny,allow
deny from all
</Directory>