First published: Sun Dec 19 1999(Updated: )
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netscape Enterprise Server | =3.0.7a | |
Novell GroupWise | =5.5 | |
Novell GroupWise | =5.2 | |
=3.0.7a | ||
=5.2 | ||
=5.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.