CVE-2000-0146: Medium severity Novell GroupWise vulnerability
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Novell GroupWise Web Access Enhancement Pack (Java Server)from your environment.Uninstall or remove the Web Access Enhancement Pack or its Java Server component if it is not required in your environment.
- Configuration
Disable the Java Server component (servlet) in the Web Access Enhancement Pack until a vendor fix is available to prevent processing of overly long URLs.
Novell GroupWise Web Access Enhancement Pack (Java Server) Java Server enabled = false - Compensating control
Deploy network or application-layer protections (WAF, reverse proxy or firewall) to reject or limit excessively long HTTP request URLs/lines and/or restrict access to the Web Access servlet to trusted IPs to mitigate long-URL denial-of-service attempts.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0146?
CVE-2000-0146 is classified as a denial of service vulnerability.
How do I fix CVE-2000-0146?
To fix CVE-2000-0146, consider updating to a newer version of Novell GroupWise that does not contain this vulnerability.
What impact does CVE-2000-0146 have on my system?
CVE-2000-0146 can cause your system to become unresponsive due to excessive resource consumption.
Which versions of Novell GroupWise are affected by CVE-2000-0146?
CVE-2000-0146 affects Novell GroupWise version 5.5 with the Enhancement Pack.
Can CVE-2000-0146 be exploited remotely?
Yes, CVE-2000-0146 can be exploited remotely by sending a long URL to the servlet.